Cpe:2.3:a:indotalent:asp.net-Core-Inventory-Order-Management-System:*:*:*:*:*:*:*:*

INDOTALENT WHMS versions before 10.20261109 contain an authentication bypass vulnerability via hard-coded JWT secrets in appsettings.json, allowing remote unauthenticated attackers to forge administrative tokens.