Lucene search
MitreCVELIST:CVE-2022-38845HistorySep 16, 2022 - 1:24 p.m.
CVE-2022-38845
2022-09-1613:24:36
mitre
www.cve.org
0.002 Low
EPSS
Percentile
54.7%
Cross Site Scripting in Import feature in EspoCRM 7.1.8 allows remote users to run malicious JavaScript in victim s browser via sending crafted csv file containing malicious JavaScript to authenticated user. Any authenticated user importing the crafted CSV file may end up running the malicious JavaScripting in the browser.
Related
cve
cve
CVE-2022-38845
2022-09-16 14:15:09
prion
prion
Cross site scripting
2022-09-16 14:15:00
osv
osv
CVE-2022-38845
2022-09-16 14:15:09
BIT-espocrm-2022-38845
2024-03-06 10:52:25
nvd
nvd
CVE-2022-38845
2022-09-16 14:15:09