Please report security issues to [email protected]
Security: devcode-it/openstamanager
Security
SECURITY.md
-
Unauthenticated privilege escalation in OpenSTAManager via modules/utenti/actions.phpGHSA-247v-7cw6-q57v published
Mar 3, 2026 by loviuzCritical -
SQL Injection in the Prima Nota moduleGHSA-4j2x-jh4m-fqv6 published
Feb 6, 2026 by loviuzHigh -
SQL Injection vulnerability in the Scadenzario bulk operations moduleGHSA-4xwv-49c8-fvhq published
Feb 6, 2026 by loviuzHigh -
Time-Based Blind SQL Injection with Amplified Denial of ServiceGHSA-4hc4-8599-xh2h published
Feb 6, 2026 by loviuzHigh -
Time-Based Blind SQL Injection in Article Pricing ModuleGHSA-p864-fqgv-92q4 published
Feb 6, 2026 by loviuzHigh -
Multiple Reflected XSS in modifica_iva.php via righe parameterGHSA-jfgp-g7x7-j25j published
Mar 3, 2026 by loviuzModerate -
OS Command Injection in P7M File ProcessingGHSA-25fp-8w8p-mx36 published
Feb 6, 2026 by loviuzCritical -
SQL Injection in ajax_select.php (componenti endpoint)GHSA-qjv8-63xq-gq8m published
Feb 6, 2026 by loviuzHigh -
SQL Injection in ajax_complete.php (get_sedi endpoint)GHSA-w995-ff8h-rppg published
Feb 3, 2026 by loviuzHigh -
SQL Injection in Stampe ModuleGHSA-qx9p-w3vj-q24q published
Feb 3, 2026 by loviuzHigh
Learn more about advisories related to devcode-it/openstamanager in the GitHub Advisory Database