3 matches found
EUVD-2019-6930
Malware in sbrugna...
8.8CVSS8.6AI score0.00947EPSS
SaveExploits5References2
CVE-2025-32385
EspoCRM before version 9.0.5 is affected by a vulnerability in the Iframe dashlet where the iframe lacks a sandbox attribute, allowing the remote page to open popups outside the iframe and potentially trick users via phishing. The iframe URL is user-supplied, and the remote page can also send mes...
6.5CVSS5.3AI score0.00291EPSS
SaveExploits0References1Affected Software1
CVE-2022-3032
When receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were not blocked. Rather, the network was accessed, the objects were loaded and displayed...
6.5CVSS8.3AI score
SaveExploits0References3
20