CVE-2019-25312

MEDIUM

InoERP 0.7.2 - Persistent Cross-Site Scripting

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2019-25312 has a selected CVSS score of 5.1 (medium); EIP currently links 1 catalogued exploit.

Description

InoERP 0.7.2 contains a persistent cross-site scripting vulnerability in the comment section that allows unauthenticated attackers to inject malicious scripts. Attackers can submit comments with JavaScript payloads that execute in other users' browsers, potentially stealing cookies and session information.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 11, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

InoERP

Browse InoIdeas / InoERP
CVE List0.7.2affected

Proofs of concept

1

Catalogued exploits

ExploitDBInoERP 0.7.2 - Persistent Cross-Site ScriptingExploitDB exploitby striderNot analyzed1 file
ExploitDB
PoC details

References

5