CVE-2023-23014: Inventory System Project Inventory System

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in InventorySystem thru commit e08fbbe17902146313501ed0b5feba81d58f455c (on Apr 23, 2021) via edit_store_name and edit_active inputs in file InventorySystem.php.

Affected products

• Inventory System Project Inventory System: up to and including 2021-04-23

Published 2023-01-20. Last modified 2026-06-17.