Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in Devs Palace ERP Online up to 4.0.0. This affects an unknown function of the file /inventory/customer-save. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-8220 A vulnerability was detected in Devs Palace ERP Online up to 4.0.0. This affects an unknown function of the file /inventory/customer-save. The manipulation results in c… https://www.cve.org/CVERecord?id=CVE-2026-8220
Post summary
CVE-2026-8220 is reported for Devs Palace ERP Online up to v4.0.0, affecting an unspecified function in /inventory/customer-save. No PoC, exploit, patch, or active exploitation information is disclosed.
🚨*CVE* CVE-2026-8220 A vulnerability was detected in Devs Palace ERP Online up to 4.0.0. This affects an unknown function of the file /inventory/customer-save. The manipulation results in c… https://www.cve.org/CVERecord?id=CVE-2026-8220 ----- Traducción: CVE-2026-8220 Se … http://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑8220 in Devs Palace ERP Online, describing an affected function in the /inventory/customer‑save module but provides no evidence of exploitation or remediation.
CVE-2026-8220 Cross-Site Scripting Vulnerability in Devs Palace ERP Online Up to 4.0.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8220
Post summary
The post announces CVE‑2026‑8220 as a Cross‑Site Scripting flaw in Devs Palace ERP Online up to 4.0.0, but does not provide exploit details, patches, or evidence of active use.