Advisories for packages from devcode-it

Listing reported advisories for packages from devcode-it sorted by their report date.

OpenSTAManager affected by unauthenticated privilege escalation via modules/utenti/actions.php
GitHub

devcode-it/openstamanager

<= 2.9.8

2026-03-03 17:43:50
OpenSTAManager Affected by XSS in modifica_iva.php via righe parameter
GitHub

devcode-it/openstamanager

< 2.9.8

2026-03-03 17:39:02
OpenSTAManager has a SQL Injection in the Prima Nota module
GitHub

devcode-it/openstamanager

<= 2.9.8

2026-02-06 18:25:56
OpenSTAManager has a SQL Injection vulnerability in the Scadenzario bulk operations module
GitHub

devcode-it/openstamanager

<= 2.9.8

2026-02-06 18:24:11
OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service
GitHub

devcode-it/openstamanager

< 2.9.8

2026-02-06 18:23:15
OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module
GitHub

devcode-it/openstamanager

<= 2.9.8

2026-02-06 18:19:51
OpenSTAManager has a SQL Injection in Scadenzario Print Template
GitHub

devcode-it/openstamanager

<= 2.9.8

2026-02-06 18:06:14
OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint)
GitHub

devcode-it/openstamanager

<= 2.9.8

2026-02-06 18:04:33
OpenSTAManager has an OS Command Injection in P7M File Processing
GitHub

devcode-it/openstamanager

<= 2.9.8

2026-02-06 17:59:37
OpenSTAManager has an SQL Injection in the Stampe Module
GitHub

devcode-it/openstamanager

<= 2.9.8

2026-02-03 19:01:47
OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint)
GitHub

devcode-it/openstamanager

<= 2.9.8

2026-02-03 18:44:20
OpenSTAManager has Authenticated SQL Injection in API via 'display' parameter
GitHub

devcode-it/openstamanager

<= 2.9.4

2025-11-19 21:00:40