CVE-2022-23056 — ERPNext - Stored XSS leads to account takover
In ERPNext, versions v13.0.0-beta.13 through v13.30.0 are vulnerable to Stored XSS at the Patient History page which allows a low privilege user to conduct an account takeover a…
Published: 2022-06-22 · CVSS: Unscored
In ERPNext, versions v13.0.0-beta.13 through v13.30.0 are vulnerable to Stored XSS at the Patient History page which allows a low privilege user to conduct an account takeover attack.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7