Lucene search

K
osvGoogleOSV:CVE-2021-3539
HistoryAug 04, 2021 - 11:15 p.m.

CVE-2021-3539

2021-08-0423:15:08
Google
osv.dev
3
cve-2021-3539
cross-site scripting
user-supplied images
version 6.1.7
espocrm

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

22.7%

EspoCRM 6.1.6 and prior suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in processing user-supplied avatar images. This issue was fixed in version 6.1.7 of the product.

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

22.7%

Related for OSV:CVE-2021-3539