KiotViet Sync vulnerabilities

2 known vulnerabilities in KiotViet Sync from Kiotviet. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  KiotViet Sync: Cross-Site Request Forgery

  CVE-2025-39381Apr 24, 2025Kiotviet

  Cross-Site Request Forgery (CSRF) vulnerability in Kiotviet KiotViet Sync allows Stored XSS. This issue affects KiotViet Sync: from n/a through 1.8.4.

• 8.5 High severity

  KiotViet Sync: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-32573Apr 17, 2025Kiotviet

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kiotviet KiotViet Sync allows SQL Injection. This issue affects KiotViet Sync: from n/a through 1.8.3.