CVE-2019-25265 — Online Inventory Manager 3.2 - Persistent Cross-Site Scripting
Online Inventory Manager 3.2 contains a stored cross-site scripting vulnerability in the group description field of the admin edit groups section. Attackers can inject malicious…
Published: 2026-02-03 · CVSS: 5.1 · CVSS 4.0
Online Inventory Manager 3.2 contains a stored cross-site scripting vulnerability in the group description field of the admin edit groups section. Attackers can inject malicious JavaScript through the description field that will execute when the groups page is viewed, allowing potential cookie theft and client-side script execution.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7