Simple Web Inventory System

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:configuroweb:simple_web_inventory_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorConfiguroweb (219852a3-13a8-5b9b-9441-b7128e70974e)
ProductSimple Web Inventory System (7283cd14-0fe1-542a-815e-69b7c8331bbd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-60314 vulnerable 2026-06-08 07:37:26.863385 Details available
Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting (XSS) due to the lack of input sanitization on the product name parameter (Nombre:Producto) allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript.
Published: 2025-10-08T00:00:00.000Z
Updated: 2025-10-08T13:50:08.433Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.