PT-2018-13675

Name of the Vulnerable Software and Affected Versions Zurmo version 3.2.4 Description The issue allows for XSS via the 'app/index.php/accounts/default/details' endpoint with specific parameters, including id, kanbanBoard, and openToTaskId. Recommendations For Zurmo version 3.2.4, update to a...