Lucene search
+L

7 matches found

NVD
NVD
•added 2026/10/05 10:16 a.m.•12 views

CVE-2026-105288

A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexController::index of the file App/ThinkPHP/Common/functions.php of the component Crm Endpoint. Such manipulation of the argument redirecturl leads to cross site scripting. The atta...

5.3CVSS0.00273EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/05 10:00 a.m.•13 views

EUVD-2026-92392

A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexController::index of the file App/ThinkPHP/Common/functions.php of the component Crm Endpoint. Such manipulation of the argument redirecturl leads to cross site scripting. The atta...

5.3CVSS3.6AI score0.00273EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/05 10:00 a.m.•43 views

CVE-2026-105288 feelec-yishu feelcrm-os Crm Endpoint functions.php index cross site scripting

A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexController::index of the file App/ThinkPHP/Common/functions.php of the component Crm Endpoint. Such manipulation of the argument redirecturl leads to cross site scripting. The atta...

5.3CVSS0.00273EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/05 10:00 a.m.•11 views

CVE-2026-105288 feelec-yishu feelcrm-os Crm Endpoint functions.php index cross site scripting

A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexController::index of the file App/ThinkPHP/Common/functions.php of the component Crm Endpoint. Such manipulation of the argument redirecturl leads to cross site scripting. The atta...

5.3CVSS3.6AI score0.00273EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/05 10:00 a.m.•15 views

CVE-2026-105288

The feelec-yishu feelcrm-os 1.0.0 software contains a vulnerability within the Crm Endpoint component. Specifically, the IndexController::index function in the file App/ThinkPHP/Common/functions.php is susceptible to cross-site scripting (XSS) due to the improper handling of the redirect_url argu...

5.3CVSS3.6AI score0.00273EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•12 views

CVE-2026-105288: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexController::index of the file App/ThinkPHP/Common/functions.php of the component Crm Endpoint. Such manipulation of the argument redirecturl leads to cross site scripting. The atta...

5.3CVSS3.6AI score0.00273EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•12 views

PT-2026-104796

A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexController::index of the file App/ThinkPHP/Common/functions.php of the component Crm Endpoint. Such manipulation of the argument redirect url leads to cross site scripting. The...

5.3CVSS3.6AI score0.00273EPSS
SaveExploits0References7
Rows per page
Query Builder