CVE-2023-3505: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Onest CRM 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/project/update/2 of the component Project List Handler. The manipulation of the argument name with the input leads to cross site scripting. It is possible to initiate...

PT-2023-25116 · Onest Crm · Onest Crm

Name of the Vulnerable Software and Affected Versions: Onest CRM version 1.0 Description: A problematic issue was found in Onest CRM, affecting an unknown part of the file /admin/project/update/2 of the component Project List Handler. The manipulation of the argument name with the input alert1...

Onest CRM 跨站脚本漏洞

Onest CRM is a CRM system from Onest Corporation. A cross-site scripting vulnerability exists in Onest CRM version 1.0, which stems from the parameter name in the file /admin/project/update/2 can lead to cross-site scripting...