CVE-2026-4175

A vulnerability was determined in Aureus ERP up to 1.3.0-BETA2. The affected element is an unknown function of the file plugins/webkul/chatter/resources/views/filament/infolists/components/messages/content-text-entry.blade.php of the component Chatter Message Handler. Executing a manipulation of the argument subject/body can lead to cross site scripting. The attack can be launched remotely. Upgrading to version 1.3.0-BETA1 is sufficient to fix this issue. This patch is called 2135ee7efff4090e70050b63015ab5e268760ec8. It is suggested to upgrade the affected component.

• CWE-79
• CWE-94

• https://github.com/aureuserp/aureuserp/commit/2135ee7efff4090e70050b63015ab5e268760ec8
• https://github.com/aureuserp/aureuserp/pull/939
• https://github.com/aureuserp/aureuserp/releases/tag/v1.3.0-BETA1
• https://vuldb.com/?ctiid.351083
• https://vuldb.com/?id.351083
• https://vuldb.com/?submit.769827

Published

Mar 16, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-41729Spring Data REST is vulnerable to SpEL expression injection …8.1
• CVE-2026-4173A flaw has been found in CodePhiliaX Chat2DB up to 0.3.7. Th…6.3
• CVE-2026-41730Spring Data REST serializes the full exception cause chain i…5.3
• CVE-2026-41731JsonKafkaHeaderMapper and the deprecated DefaultKafkaHeaderM…8.1
• CVE-2026-41732JsonPulsarHeaderMapper matched type headers against trusted …8.1
• CVE-2026-4174A vulnerability has been found in Radare2 5.9.9. This issue …3.3
• CVE-2026-4176Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 befo…9.8
• CVE-2026-4177YAML::Syck versions through 1.36 for Perl has several potent…9.1
• CVE-2026-4178Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-4179Issues in stm32 USB device driver (drivers/usb/device/usb_dc…6.1
• CVE-2026-4180A vulnerability was identified in D-Link DIR-816 1.10CNB05. …9.8
• CVE-2026-4181A security flaw has been discovered in D-Link DIR-816 1.10CN…9.8