All packages
Agenzia Impresa Eccobook vulnerabilities
3 known CVE vulnerabilities in Agenzia Impresa Eccobook, translated and rated.
- CVE-2025-51629High
A cross-site scripting (XSS) vulnerability was found in the PdfViewer component of Agenzia Impresa Eccobook 2.81.1. Attackers can inject malicious JavaScript or HTML via the Temp parameter.
- CVE-2025-51628High
An IDOR vulnerability in the PdfHandler component of Agenzia Impresa Eccobook version 2.81.1 and below allows unauthenticated attackers to read confidential documents by manipulating the DocumentoId parameter.
- CVE-2025-51627Medium
Incorrect access control in CaricaVerbale in Agenzia Impresa Eccobook v2.81.1 allows authenticated attackers with low-level access to escalate privileges to Administrator.