CVE-2021-40303

CVE-2021-40303 perfex crm 1.10 は /clients/profile を介した格納型クロスサイトスクリプティング（XSS）に対して脆弱です。 poc: root@kitploit: POST /clients/profile HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 X11; Linux x8664; rv:78.0 Gecko/20100101 Firefox/78.0 Accept:...

Exploit for Cross-site Scripting in Perfexcrm Perfex_Crm

CVE-2021-40303 perfex crm 1.10 is vulnerable to Stored Cross S...

CVE-2021-40303

perfex crm 1.10 is vulnerable to Cross Site Scripting XSS via /clients/profile...

CVE-2021-40303

perfex crm 1.10 is vulnerable to Cross Site Scripting XSS via /clients/profile...

Perfex Crm 跨站脚本漏洞

Perfex Crm is a customer relationship management software. For managing clients, projects and creating invoices in the cloud. A cross-site scripting vulnerability exists in Perfex Crm version 1.10, which stems from the lack of effective filtering and escaping of user-supplied data in...