CVE-2026-110878 | aureuserp Aureus ERP up to 1.6.0 RuleForm.php Operation Type/Location names cross site scripting

October 15, 2026 Yanac

A vulnerability has been found in aureuserp Aureus ERP up to 1.6.0 and classified as problematic. The impacted element is an unknown function of the file RuleForm.php. Performing a manipulation of the argument Operation Type/Location names results in cross site scripting.

This vulnerability is identified as CVE-2026-110878. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More