3 matches found
GHSA-RWH9-8XX8-4WFM Cross-site Scripting in OpenCRX
In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting XSS, due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance...
CVE-2021-25959 OpenCRX - Reflected Cross-Site Scripting in Password Reset Functionality
In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting XSS, due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance...
PT-2021-16883
Name of the Vulnerable Software and Affected Versions OpenCRX versions v4.0.0 through v5.1.0 Description The issue is related to reflected Cross-site Scripting XSS due to unsanitized parameters in the password reset functionality, allowing the execution of external javascript files on any user of...