Vulners
Lucene search
2 matches found
GHSA-RWH9-8XX8-4WFM Cross-site Scripting in OpenCRX
In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting XSS, due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance...
6.1CVSS6.2AI score0.00865EPSS
SaveExploits0References3
CVE-2021-25959 OpenCRX - Reflected Cross-Site Scripting in Password Reset Functionality
In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting XSS, due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance...
6.1CVSS6.4AI score0.00865EPSS
SaveExploits0References2
20