2 matches found
CVE-2023-25440
Stored Cross Site Scripting XSS vulnerability in the add contact function CiviCRM 5.59.alpha1, allows attackers to execute arbitrary code in first/second name field...
5.4CVSS0.02537EPSS
SaveExploits4References2
CVE-2023-25440: Improper Neutralization of Input During Web Page Generation
Stored Cross Site Scripting XSS vulnerability in the add contact function CiviCRM 5.59.alpha1, allows attackers to execute arbitrary code in first/second name field...
5.4CVSS6.5AI score0.02537EPSS
SaveExploits4References3
20