CVE-2026-94387 | aureuserp Aureus ERP up to 1.5.x Chatter old_value/new_value cross site scripting

A vulnerability, which was classified as problematic, has been found in aureuserp Aureus ERP up to 1.5.x. This issue affects some unknown processing of the component Chatter. This manipulation of the argument old_value/new_value causes cross site scripting.

This vulnerability is registered as CVE-2026-94387. Remote exploitation of the attack is possible. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More