Cross site scripting

Erxes, an experience operating system XOS with a set of plugins, is vulnerable to cross-site scripting in versions 0.22.3 and prior. This results in client-side code execution. The victim must follow a malicious link or be redirected there from malicious web site. There are no known patches...

CVE-2021-32853 Erxes vulnerable to Cross-site Scripting

Erxes, an experience operating system XOS with a set of plugins, is vulnerable to cross-site scripting in versions 0.22.3 and prior. This results in client-side code execution. The victim must follow a malicious link or be redirected there from malicious web site. There are no known patches...

erxes 跨站脚本漏洞

erxes is an open source Hubspot/Qualtrics alternative to erxes open source. Enables SaaS providers and digital marketing agencies/developers to create unique experiences for their entire business. A security vulnerability exists in erxes 0.22.3 and prior versions, which stems from the presence of...

PT-2023-12185 · Erxes · Erxes

Name of the Vulnerable Software and Affected Versions: Erxes versions 0.22.3 and prior Description: Erxes, an experience operating system XOS with a set of plugins, is vulnerable to cross-site scripting. This results in client-side code execution. The victim must follow a malicious link or be...

CVE-2021-32853 Erxes vulnerable to Cross-site Scripting

Erxes, an experience operating system XOS with a set of plugins, is vulnerable to cross-site scripting in versions 0.22.3 and prior. This results in client-side code execution. The victim must follow a malicious link or be redirected there from malicious web site. There are no known patches...

CVE-2021-32853

Erxes XOS is affected by a cross-site scripting vulnerability tracked as CVE-2021-32853. Publicly disclosed for versions 0.22.3 and earlier, it enables client-side code execution when a victim follows a malicious link or is redirected from a malicious site. The core issue is improper escaping of ...