Lucene search
MitreCVELIST:CVE-2019-14350HistoryJul 28, 2019 - 3:26 p.m.
CVE-2019-14350
2019-07-2815:26:58
mitre
www.cve.org
5
EPSS
0.001
Percentile
37.3%
EspoCRM 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the Knowledge base. A malicious attacker can inject JavaScript code in the body parameter during api/v1/KnowledgeBaseArticle knowledge-base record creation.
References
Related
prion
prion
Design/Logic Flaw
2019-07-28 16:15:00
nvd
nvd
CVE-2019-14350
2019-07-28 16:15:10
osv
osv
CVE-2019-14350
2019-07-28 16:15:10
cve
cve
CVE-2019-14350
2019-07-28 16:15:10