CVE-2020-36501

creationtimestamp| type| source ---|---|--- 2021-10-23 00:45:33+00:00| seen| https://t.me/cibsecurity/31083...

CVE-2020-36501

Multiple cross-site scripting XSS vulnerabilities in the Support module of SugarCRM v6.5.18 allows attackers to execute arbitrary web scripts or HTML via crafted payloads entered into the primary address state or alternate address state input fields...

CVE-2020-36501

CVE-2020-36501 affects SugarCRM v6.5.18 in the Support module. The issue comprises multiple XSS vulnerabilities in the input fields for Primary Address State and Alternate Address State, allowing an attacker to inject arbitrary web scripts or HTML. The root cause is cited as multiple XSS flaws in...