CVE-2026-111284 | Webkul Aureus ERP up to 1.6.0 HolidayAction.php cross site scripting

October 15, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Webkul Aureus ERP up to 1.6.0. This affects an unknown part of the file HolidayAction.php. Performing a manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2026-111284. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More