CVE-2023-5989: Uyumsoft Lioxerp

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uyumsoft Information System and Technologies' LioXERP allows an authenticated user to execute Stored XSS. This issue affects LioXERP: before v.146.

Affected products

• Uyumsoft Lioxerp: before 0.146 (fixed in 0.146)

Published 2023-12-21. Last modified 2026-06-17.