SA
Product
Salonerp
2
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch
Add Salonerp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-45406 | 8.8 | Jan 14 | In SalonERP 3.0.1, a SQL injection vulnerability allows an attacker to inject payload using 'sql' parameter in SQL query while generating a report Affected: 3.0.1 |
| CVE-2022-42753 | 6.1 | Nov 3 | SalonERP version 3.0.2 allows an external attacker to steal the cookie of arbitrary users Affected: 3.0.2 |
Showing 2
