Five CVEs in Tryton ERP: Stored XSS, Broken Access Controls, and Server Info Leaks
Five CVEs disclosed in Tryton ERP through responsible disclosure -- stored XSS that escalates to unauthenticated via email, access control bypasses on data exports, and stack traces handed to any logged-in user. All patched, all basic, all in production for years.