174 matches found
CVE-2023-40809
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number...
CVE-2023-40814
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field...
Design/Logic Flaw
OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field...
Input validation
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field...
Design/Logic Flaw
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation...
Design/Logic Flaw
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...
Input validation
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number...
Design/Logic Flaw
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field...
Input validation
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field...
Design/Logic Flaw
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field...
CVE-2023-40809
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number...
CVE-2023-40813
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation...
openCRX Security Vulnerabilities
openCRX is an open source Crm software. A security vulnerability exists in openCRX version 5.2.0, which originated from a vulnerability that allows attackers to perform HTML injection attacks via the Accounts Group Name field...
CVE-2023-40815
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field...
CVE-2023-40817
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field...
CVE-2023-40809
OpenCRX 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number. Root cause is improper input sanitization/validation in that field, enabling potential JavaScript injection as described by Veracode sources. CVSSv3.1 shows a base score of 6.1 (MEDIUM) with NETWORK at...
openCRX Security Vulnerabilities
openCRX is an open source Crm software. A security vulnerability exists in openCRX version 5.2.0, which originated from a vulnerability that allows attackers to perform HTML injection attacks via the Category Creation Name field...
CVE-2023-40817
OpenCRX 5.2.0 is vulnerable to HTML injection through the Product Configuration Name Field. The Red Hat, Veracode, and CVE ecosystem entries corroborate that the issue stems from insufficient input sanitization in the Product Configuration Name Field, enabling injection of HTML. Practical impact ...
PT-2023-27649 · Opencrx · Opencrx
Name of the Vulnerable Software and Affected Versions: OpenCRX version 5.2.0 Description: The issue allows for HTML injection via the Accounts Group Name Field. Recommendations: For OpenCRX version 5.2.0, update to a version that fixes this issue, or as a temporary workaround, consider validating...
