CVE-2023-40814

OpenCRX 5.2.0 is vulnerable to HTML injection via the Accounts Name Field. Root cause: lack of input validation in the Accounts Name Field enabling HTML injection, which is corroborated by multiple sources describing XSS risk in OpenCRX. Impact stated across sources includes potential XSS vectors...