myTinyWMS vulnerabilities

Products

• myTinyWMS 1

Latest myTinyWMS CVEs

Newest publication first

1. CVE-2026-61804 myTinyWMS has Stored Cross-Site Scripting (XSS) in Product and Category Management

   Published 2026-10-30

   High·CVSS 8.1 EPSS 0.28%

   myTinyWMS is a free, open-source warehouse management system. Prior to version 1.6.4, Product (Artikel) and Category management store the name parameter without adequate backend sanitization and render raw database strings through unescaped Blade output in dynamic table cells, in...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.