2 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the online Documents functionality in SugarCRM 5.2.x before 5.2.0l and 5.5.x before 5.5.0a allows remote authenticated users to inject arbitrary web script or HTML via the Document Name field...
4.3CVSS5.7AI score0.01033EPSS
SaveExploits2References4Affected Software1
CVE-2010-0465: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the online Documents functionality in SugarCRM 5.2.x before 5.2.0l and 5.5.x before 5.5.0a allows remote authenticated users to inject arbitrary web script or HTML via the Document Name field...
4.3CVSS6AI score0.01033EPSS
SaveExploits2References2
20