Zurmo cross-site scripting vulnerability (CNVD-2018-02168)

Zurmo is the United States Zurmo company's set of open source PHP-based customer relationship management system CRM. A cross-site scripting vulnerability exists in Zurmo version 3.2.3. A remote attacker can exploit this vulnerability by sending the 'latitude' or 'longitude' parameter to...

Design/Logic Flaw

Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint...

CVE-2017-18004

Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint...

CVE-2017-18004: Improper Neutralization of Input During Web Page Generation

Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint...

PT-2017-15153

Name of the Vulnerable Software and Affected Versions Zurmo version 3.2.3 Description The issue allows for XSS attacks via the latitude or longitude parameter to the "maps/default/mapAndPoint" endpoint. Recommendations For Zurmo version 3.2.3, avoid using the latitude or longitude parameters in t...