Sublime CRM 代码注入漏洞

Sublime CRM is a Customer Relationship Management CRM system from Sublime. A code injection vulnerability exists in Sublime CRM prior to version 20250207, which stems from a cross-site scripting issue in the msgto parameter of the /crm/inicio.php file of the HTTP POST Request Handler module...

CVE-2025-1360: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in Internet Web Solutions Sublime CRM up to 20250207. Affected is an unknown function of the file /crm/inicio.php of the component HTTP POST Request Handler. The manipulation of the argument msgto leads to cross site scripting. It is...