3 matches found
CVE-2023-40816
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...
CVE-2023-40816
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...
CVE-2023-40816
OpenCRX 5.2.0 is vulnerable to HTML injection via the Activity Milestone Name Field, with reports indicating Cross‑Site Scripting potential (malicious script injection). Root cause: inadequate input sanitization/validation for that field. Exploitation details are not provided in the documents; no...