CVE-2024-12796
Reflected XSS in Holistic IT, Consultancy Coop.'s Workcube ERP
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
11th
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Holistic IT, Consultancy Coop. Workcube ERP allows Reflected XSS. This issue affects Workcube ERP: from V12 - V14 before Cognitive.
| CWE | CWE-79 |
| Vendor | holistic it, consultancy coop. |
| Product | workcube erp |
| Published | Sep 16, 2025 |
| Last Updated | Jun 1, 2026 |
Stay Ahead of the Next One
Get instant alerts for holistic it, consultancy coop. workcube erp
Be the first to know when new medium vulnerabilities affecting holistic it, consultancy coop. workcube erp are published β delivered to Slack, Telegram or Discord.
Get Free Alerts β
Free Β· No credit card Β· 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Affected Versions
Holistic IT, Consultancy Coop. / Workcube ERP
V12 - V14 < Cognitive
References
Credits
Engin AYDOΔAN