CVE-2020-37022 — OpenZ ERP 3.6.60 - Persistent Cross-Site Scripting
OpenZ ERP 3.6.60 contains a persistent cross-site scripting vulnerability in the Employee module's name and description parameters. Attackers can inject malicious scripts throug…
Published: 2026-01-30 · CVSS: 5.1 · CVSS 4.0
OpenZ ERP 3.6.60 contains a persistent cross-site scripting vulnerability in the Employee module's name and description parameters. Attackers can inject malicious scripts through POST requests to , enabling session hijacking and manipulation of application modules.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7