CVE-2023-40809

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number...

openCRX Security Vulnerabilities

openCRX is an open source Crm software. A security vulnerability exists in openCRX version 5.2.0, which originated from a vulnerability that allows attackers to perform HTML injection attacks via the Category Creation Name field...

CVE-2023-40809: Improper Neutralization of Input During Web Page Generation

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number...

CVE-2023-40815

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field...

CVE-2023-40815: Improper Neutralization of Input During Web Page Generation

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field...

CVE-2023-40816

OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...

CVE-2023-40814

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field...

CVE-2023-40813

OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation...

CVE-2023-40817

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field...

PT-2023-27649 · Opencrx · Opencrx

Name of the Vulnerable Software and Affected Versions: OpenCRX version 5.2.0 Description: The issue allows for HTML injection via the Accounts Group Name Field. Recommendations: For OpenCRX version 5.2.0, update to a version that fixes this issue, or as a temporary workaround, consider validating...

CVE-2023-40817

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field...

CVE-2023-40809

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number...

CVE-2023-40814

OpenCRX 5.2.0 is vulnerable to HTML injection via the Accounts Name Field. Root cause: lack of input validation in the Accounts Name Field enabling HTML injection, which is corroborated by multiple sources describing XSS risk in OpenCRX. Impact stated across sources includes potential XSS vectors...

CVE-2023-40817

OpenCRX 5.2.0 is vulnerable to HTML injection through the Product Configuration Name Field. The Red Hat, Veracode, and CVE ecosystem entries corroborate that the issue stems from insufficient input sanitization in the Product Configuration Name Field, enabling injection of HTML. Practical impact ...

CVE-2023-40809

OpenCRX 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number. Root cause is improper input sanitization/validation in that field, enabling potential JavaScript injection as described by Veracode sources. CVSSv3.1 shows a base score of 6.1 (MEDIUM) with NETWORK at...

CVE-2023-40815

Summary: OpenCRX 5.2.0 is affected by an HTML injection flaw in the Category Creation Name Field. This issue is repeatedly described as enabling Cross‑Site Scripting (XSS) via the category name input, reflecting a lack of input validation in that field. The available documents identify the vulner...

CVE-2023-40813: Improper Neutralization of Input During Web Page Generation

OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation...

OpenCRX Security Vulnerabilities

openCRX is an open source Crm software. A security vulnerability exists in OpenCRX version 5.2.0, which originated from a vulnerability that allows attackers to conduct HTML injection attacks via the component Activity Search Criteria-Activity Number...

OpenCRX Security Vulnerabilities

openCRX is an open source Crm software. A security vulnerability exists in OpenCRX version 5.2.0, which originated from a vulnerability that allows attackers to perform HTML injection attacks via the Product Configuration Name field...

CVE-2023-40815

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field...