CVE-2017-14715

CVE-2017-14715 affects EPESI 1.8.2 rev20170830 with a Stored XSS in the Tasks Alerts Title parameter. The CNVD entry confirms a cross-site scripting vulnerability exists and that an attacker can inject arbitrary web script or HTML. No additional technical details (e.g., exploit steps, affected ve...

CVE-2017-14716

CVE-2017-14716 affects EPESI 1.8.2 rev20170830, where a Stored XSS exists in the Tasks Title parameter. The consolidated documents confirm the flaw is a stored cross-site scripting vulnerability in the Tasks Title field, with CVSS metrics indicating low severity for the base score (3.5) and a sin...

CVE-2017-14717

This CVE concerns EPESI 1.8.2 rev20170830 with a Stored XSS vulnerability in the Tasks Description field. The issue originates from user-controllable content stored in a task description, enabling script execution when viewed. Public references (e.g., Exploit-DB, 0day, and OpenVAS entries) corrob...

CVE-2017-14713

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter...

CVE-2017-14714

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter...

CVE-2017-14715

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter...

CVE-2017-14714

EPESI 1.8.2 rev20170830 is vulnerable to a stored cross-site scripting (XSS) flaw in the Phonecalls Subject field. The issue is documented across multiple sources (including CVE-2017-14714 entries and related advisories) as a stored XSS in the Phonecalls Subject parameter. The available connected...

CVE-2017-14713

Affected product: EPESI 1.8.2 rev20170830. Vulnerability: Stored XSS in the Phonecalls Description parameter. Root cause: input is stored and rendered in a way that allows injection of web script/HTML. Impact in CVSS indicates MEDIUM severity (CVSS-3.0 base 5.4) with user interaction required. No...

CVE-2017-14717

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter...

CVE-2017-14712

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter...

CVE-2017-14712

Affected product: EPESI 1.8.2 rev20170830. Vulnerability: Stored XSS in the Tasks Phonecall Notes Title parameter. Root cause (per sources): unescaped input in that field allows script injection, enabling arbitrary script execution in the context of the user. Impact: described as cross-site scrip...

Telaxus EPESI cross-site scripting vulnerability (CNVD-2017-11058)

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-site scripting vulnerability exists in the...

Telaxus EPESI cross-site scripting vulnerability (CNVD-2017-11059)

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-site scripting vulnerability exists in Telaxus EPESI 1.8.2...

Telaxus EPESI cross-site scripting vulnerability (CNVD-2017-11061)

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-site scripting vulnerability exists in Telaxus EPESI 1.8.2...

Telaxus EPESI Cross-Site Scripting Vulnerability (CNVD-2017-11060)

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-site scripting vulnerability exists in Telaxus EPESI 1.8.2...

CVE-2017-9623

Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted country data...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted country data...

CVE-2017-9621

Cross-site scripting XSS vulnerability in modules/Base/Lang/Administrator/updatetranslation.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 original or 2 new parameter...

CVE-2017-9624

Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted currency decimal-sign data...

Cross site scripting

Cross-site scripting XSS vulnerability in modules/Base/Lang/Administrator/updatetranslation.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 original or 2 new parameter...