20188 matches found
CVE-2023-40816
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...
CVE-2023-40817: Improper Neutralization of Input During Web Page Generation
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field...
CVE-2023-40817
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field...
CVE-2023-40814
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field...
CVE-2023-40816
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...
CVE-2023-40817
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field...
CVE-2023-40810
OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field...
CVE-2023-40810
OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field...
CVE-2023-40816
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...
CVE-2023-40813
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation...
PT-2023-27650 · Opencrx · Opencrx
Name of the Vulnerable Software and Affected Versions: OpenCRX version 5.2.0 Description: The issue allows for HTML injection via Activity Saved Search Creation. Recommendations: For OpenCRX version 5.2.0, update to a version that fixes this issue, as no specific workaround is provided for this...
PT-2023-27647 · Opencrx · Opencrx
Name of the Vulnerable Software and Affected Versions: OpenCRX version 5.2.0 Description: The issue concerns HTML injection via the Activity Number in the Activity Search Criteria. Recommendations: For OpenCRX version 5.2.0, as a temporary workaround, consider restricting access to the Activity...
openCRX Security Vulnerabilities
openCRX is an open source Crm software. A security vulnerability exists in openCRX version 5.2.0, which originated from a vulnerability that allows attackers to conduct HTML injection attacks via the component Activity Saved Search Creation...
CVE-2023-40812: Improper Neutralization of Input During Web Page Generation
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field...
CVE-2023-40810
OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field...
CVE-2023-40816
OpenCRX 5.2.0 is vulnerable to HTML injection via the Activity Milestone Name Field, with reports indicating Cross‑Site Scripting potential (malicious script injection). Root cause: inadequate input sanitization/validation for that field. Exploitation details are not provided in the documents; no...
CVE-2023-40813
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation...
CVE-2023-40810: Improper Neutralization of Input During Web Page Generation
OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field...