CVE-2017-14923: Improper Neutralization of Input During Web Page Generation

Stored XSS vulnerability via IMG element at "Leadname" of CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users...

CVE-2017-14923

Stored XSS vulnerability via IMG element at "Leadname" of CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users...

CVE-2017-14923

The CVE-2017-14923 issue affects Tine 2.0 Community Edition prior to 2017.08.4, exposing a Stored XSS via an IMG element in the Leadname field. An authenticated user can inject JavaScript that is mishandled when rendered by admins and other users. CVSS data in the records indicates a MEDIUM base ...

CVE-2017-14923

Stored XSS vulnerability via IMG element at "Leadname" of CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users...

PT-2017-13757

Name of the Vulnerable Software and Affected Versions Tine 2.0 Community Edition versions prior to 2017.08.4 Description The issue allows an authenticated user to inject JavaScript via a Stored XSS vulnerability, specifically through the IMG element at the "Leadname" of CRM. This injected...