CVE-2026-92418

A cross-site scripting (XSS) vulnerability exists in the Save Endpoint component of ChangeWeDer crm (up to commit c07bd4c9), specifically in the file src/main/resources/public/js/customerServe/customer.serve.js. Manipulation of the customerName argument allows an authenticated remote attacker to ...

CVE-2026-92418 ChangeWeDer crm Save Endpoint customer.serve.js cross site scripting

A vulnerability was determined in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This vulnerability affects unknown code of the file src/main/resources/public/js/customerServe/customer.serve.js of the component Save Endpoint. This manipulation of the argument customerName causes...