Telaxus EPESI cross-site scripting vulnerability (CNVD-2017-32705)

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-site scripting vulnerability exists in the 'Tasks...

CVE-2017-14716

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter...

CVE-2017-14712

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter...

CVE-2017-14717

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter...

Cross site scripting

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter...

CVE-2017-14715

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter...

CVE-2017-14716

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter...

CVE-2017-14713

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter...

CVE-2017-14713

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter...

Cross site scripting

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter...

Cross site scripting

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter...

CVE-2017-14717

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter...

CVE-2017-14714

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter...

CVE-2017-14714

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter...

CVE-2017-14715

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter...

Cross site scripting

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter...

Cross site scripting

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter...

CVE-2017-14712

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter...

Cross site scripting

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter...

CVE-2017-14716

CVE-2017-14716 affects EPESI 1.8.2 rev20170830, where a Stored XSS exists in the Tasks Title parameter. The consolidated documents confirm the flaw is a stored cross-site scripting vulnerability in the Tasks Title field, with CVSS metrics indicating low severity for the base score (3.5) and a sin...