CVE-2023-27151

The open-source CRM software openCRX version 5.2.0 is vulnerable to an HTML injection flaw. The issue resides in the Search Criteria-Activity Number within the Saved Search Activity, where the application fails to properly neutralize input in the Name , Description , or Activity Number fields. An...