6 matches found
CVE-2017-14714
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter...
5.4CVSS5.2AI score0.00631EPSS
SaveExploits2References1
CVE-2017-14715
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter...
5.4CVSS5.2AI score0.00644EPSS
SaveExploits2References1
Cross site scripting
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter...
3.5CVSS5.2AI score0.00631EPSS
SaveExploits2References1Affected Software1
CVE-2017-14712
Affected product: EPESI 1.8.2 rev20170830. Vulnerability: Stored XSS in the Tasks Phonecall Notes Title parameter. Root cause (per sources): unescaped input in that field allows script injection, enabling arbitrary script execution in the context of the user. Impact: described as cross-site scrip...
5.4CVSS5.1AI score0.01398EPSS
SaveExploits5References2Affected Software1
20