PT-2017-17566

Name of the Vulnerable Software and Affected Versions Zurmo version 3.1.1 Description The issue allows for a Cross-Site Scripting XSS attack. This can be achieved by using a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/toggleCollapse. Recommendations For...