3 matches found
CVE-2023-40816
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...
6.1CVSS6.3AI score0.00463EPSS
SaveExploits1References2
CVE-2023-40816
OpenCRX 5.2.0 is vulnerable to HTML injection via the Activity Milestone Name Field, with reports indicating Cross‑Site Scripting potential (malicious script injection). Root cause: inadequate input sanitization/validation for that field. Exploitation details are not provided in the documents; no...
6.1CVSS6.3AI score0.00463EPSS
SaveExploits1References1Affected Software1
20