2 matches found
CVE-2018-16654
Zurmo 3.2.4 Stable allows XSS via app/index.php/accounts/default/details?id=2&kanbanBoard=1&openToTaskId=1...
6.1CVSS5.8AI score0.00826EPSS
SaveExploits1References1
CVE-2018-16654
Zurmo 3.2.4 Stable is affected by a cross-site scripting (XSS) vulnerability in the endpoint app/index.php/accounts/default/details?id=2&kanbanBoard=1&openToTaskId=1. The issue allows injection of scripts via crafted URL parameters, escalating potential to modify or exfiltrate data (per CVSS metr...
6.1CVSS5.9AI score0.00826EPSS
SaveExploits1References1Affected Software1
20