aureus_erp vulnerabilities

CVEs whose affected-version data names the aureus_erp package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-93454Medium· 5.4PoC

4d ago

Aureus ERP through 1.6.0 stores the Payment Term note field unsanitized and renders it as raw HTML in the Accounting plugin

Aureus ERP through 1.6.0 stores the Payment Term note field unsanitized and renders it as raw HTML in the Accounting plugin. Authenticated users with payment-term create permission can submit arbitrary JavaScript to the payment-terms end…

▾ TwilightWebkul · Aureus ERPEPSS 0.17%via NVD