webordersystem_kundenmanager vulnerabilities
CVEs whose affected-version data names the webordersystem_kundenmanager package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-4951Medium· 5.1Reflected Cross-Site Scripting in CustomerAdministration Portal (KundenManager)in VertiGIS WebOrderSystem
The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to search for employees across all defined companies (user groups). The search term can be passed in the "searchValue" URL parameter, so…
▾ SunlitVertiGIS Ltd. · WebOrderSystem (KundenManager)via CVEORG
CVE-2026-4950Medium· 4.8Stored Cross-Site Scripting in CustomerAdministration Portal (KundenManager) in VertiGIS WebOrderSystem
The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to manage the employees of defined companies (user groups). User properties, for example the "secondName" parameter, can be filled with …
▾ SunlitVertiGIS Ltd. · WebOrderSystem (KundenManager)via CVEORG