configuroweb vulnerabilities

Products

• inventariobasico 1
• simple web inventory system 1

Latest configuroweb CVEs

Newest publication first

1. CVE-2026-118585 configuroweb inventariobasico Add Product addlist.php cross site scripting

   Published 2026-10-28

   Medium·CVSS 5.1 EPSS 0.20%

   A vulnerability was identified in configuroweb inventariobasico c9377cdba474deb3eb5a0704d197b5733af16b47/f9db0c0a04d79ad931c218140df4fb23809d4fab. This vulnerability affects unknown code of the file addlist.php of the component Add Product Page. Such manipulation of the argument...

2. CVE-2025-60314 Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting (XSS) due to the lack of input sanitization on the product name parameter (Nombre:Producto) allowing an authen...

   Published 2025-10-08

   Medium·CVSS 5.4 EPSS 0.26%

   Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting (XSS) due to the lack of input sanitization on the product name parameter (Nombre:Producto) allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.