PT-2019-13747

Name of the Vulnerable Software and Affected Versions EsponCRM versions prior to 5.6.9 Description The issue allows a malicious user to inject JavaScript in the title and breadcrumb of a newly formed entity, which can lead to stored XSS execution. This can result in the theft of user cookies when...

PT-2019-13458

Name of the Vulnerable Software and Affected Versions EsponCRM versions prior to 5.6.4 Description The issue allows remote attackers to execute malicious JavaScript and inject arbitrary source code into target pages through a stored XSS attack. This attack involves storing a new stream message...