16010 matches found
CVE-2023-40812
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field...
CVE-2023-40815
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field...
CVE-2023-40810
OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field...
CVE-2023-40815
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field...
CVE-2023-40816
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...
CVE-2023-40814
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field...
CVE-2023-40809
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number...
Input validation
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field...
Design/Logic Flaw
OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field...
Design/Logic Flaw
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation...
Design/Logic Flaw
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...
Design/Logic Flaw
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field...
Design/Logic Flaw
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field...
Input validation
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field...
Input validation
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number...
openCRX Security Vulnerabilities
openCRX is an open source Crm software. A security vulnerability exists in openCRX version 5.2.0, which originated from a vulnerability that allows attackers to perform HTML injection attacks via the Category Creation Name field...
CVE-2023-40817
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field...
CVE-2023-40813
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation...
CVE-2023-40817
OpenCRX 5.2.0 is vulnerable to HTML injection through the Product Configuration Name Field. The Red Hat, Veracode, and CVE ecosystem entries corroborate that the issue stems from insufficient input sanitization in the Product Configuration Name Field, enabling injection of HTML. Practical impact ...
