CVE-2017-11727

services/systemio/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary client-side JavaScript code execution involving a ContactCommon field on victims who click on a crafted link, aka XSS...

CVE-2017-11727

ConnectWise Manage 2017.5 is affected by a cross-site scripting vulnerability in the component services/system_io/actionprocessor/Contact.rails, exploitable when a victim clicks a specially crafted link that leverages a ContactCommon field to inject arbitrary client-side JavaScript. The issue is ...