CVE Notifier

CVE-2026-90574 CWE-89 6.3

itsourcecode Sales and Inventory System emp_transac.php add sql injection

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/emp_transac.php?action=add. The manipulation of the argument firstname results in sq…

cve.org itsourcecode:Sales · and · Inventory 13 Sep 2026

CVE-2026-90573 CWE-476 3.3

GPAC MP4Box vrml_tools.c gf_sg_mfurl_del null pointer dereference

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gf_sg_mfurl_del of the file scenegraph/vrml_tools.c of the component MP4Box. The manipulation leads to null pointer dereference.…

cve.org n/a:GPAC 13 Sep 2026

CVE-2026-90572 CWE-119 4.7

davenardella snap7 s7_micro_client.cpp opUpload memory corruption

A vulnerability was determined in davenardella snap7 up to 1.4.3. The affected element is the function TSnap7MicroClient::opUpload of the file src/core/s7_micro_client.cpp. Executing a manipulation of the argument DataLe…

cve.org davenardella:snap7 13 Sep 2026

CVE-2026-90571 CWE-79 4.3

Exrick xmall Order Printing order-print.jsp cross site scripting

A vulnerability was found in Exrick xmall up to 19e7917d5ed3bd2a2421a3a246ad494c133ba94c. Impacted is an unknown function of the file xmall-manager-web/src/main/webapp/WEB-INF/jsp/order-print.jsp of the component Order P…

cve.org Exrick:xmall 13 Sep 2026

CVE-2026-90570 CWE-79 2.4

linlinjava litemall Product Detail index.vue AdminGoodsService.validate cross site scripting

A vulnerability has been found in linlinjava litemall 1.4.0/1.5.0/1.6.0/1.7.0/1.8.0. This issue affects the function AdminGoodsService.validate of the file litemall-vue/src/views/items/detail/index.vue of the component P…

cve.org linlinjava:litemall 13 Sep 2026

CVE-2026-90569 CWE-79 2.4

linlinjava litemall Admin Topic index.vue AdminTopicController.validate cross site scripting

A flaw has been found in linlinjava litemall 1.5.0/1.6.0/1.7.0/1.8.0. This vulnerability affects the function AdminTopicController.validate of the file litemall-vue/src/views/items/topic/index.vue of the component Admin …

cve.org linlinjava:litemall 13 Sep 2026

CVE-2026-90568 CWE-79 3.5

moxi624 Mogu Blog v2 blogSort Endpoint info.ftl BlogSortServiceImpl.addBlogSort cross site scripting

A vulnerability was detected in moxi624 Mogu Blog v2 up to 5.2. This affects the function BlogSortServiceImpl.addBlogSort of the file mogu_web/src/main/resources/templates/info.ftl of the component blogSort Endpoint. The…

cve.org moxi624:Mogu · Blog · v2 13 Sep 2026

CVE-2026-90567 CWE-79 3.5

quequnlong shiyi-blog Search index.vue highlightKeyword cross site scripting

A security vulnerability has been detected in quequnlong shiyi-blog up to 1.2.1. Affected by this issue is the function highlightKeyword of the file blog-web/src/components/Search/index.vue of the component Search. The m…

cve.org quequnlong:shiyi-blog 13 Sep 2026

CVE-2026-90566 CWE-285 7.3

Rizwan17 inventory-management-system Registration register.php createUserAccount improper authorization

A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the function createUserAccount of the file register.php of the comp…

cve.org Rizwan17:inventory-management-system 13 Sep 2026

CVE-2026-90565 CWE-284 5.3

Rizwan17 inventory-management-system dashboard.php access control

A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file dashboard.php. Performing a manipulation of the argu…

cve.org Rizwan17:inventory-management-system 13 Sep 2026

CVE-2026-90564 CWE-79 3.5

quequnlong shiyi-blog chat sendMsg Endpoint index.vue SysChatMsgMapper.getChatMsgList cross site scripting

A vulnerability was identified in quequnlong shiyi-blog 1.0.0-1.2.1. This impacts the function SysChatMsgMapper.getChatMsgList of the file blog-web/src/views/chat/index.vue of the component chat sendMsg Endpoint. Such ma…

cve.org quequnlong:shiyi-blog 13 Sep 2026

CVE-2026-90563 CWE-79 3.5

maliangnansheng bbs-springboot ArticleController.java utils.toToc cross site scripting

A vulnerability was determined in maliangnansheng bbs-springboot 3.0.0. This affects the function utils.toToc of the file ArticleController.java. This manipulation causes cross site scripting. The attack is possible to b…

cve.org maliangnansheng:bbs-springboot 13 Sep 2026