172 matches found
CVE-2023-27151
openCRX 5.2.0 was discovered to contain an HTML injection vulnerability for Search Criteria-Activity Number in the Saved Search Activity via the Name, Description, or Activity Number field...
PT-2023-20976 · Opencrx · Opencrx
Name of the Vulnerable Software and Affected Versions: openCRX version 5.2.0 Description: A cross-site scripting XSS issue was discovered in openCRX, which occurs via the Name field after creating a Tracker in Manage Activity. This allows for potential malicious script execution. Recommendations:...
Cross Site Scripting (XSS)
openCRX is vulnerable to Cross Site Scripting XSS. The vulnerability is due to a lack of validation in Category creation field, which allows an attacker to inject HTML into the application...
Cross Site Scripting (XSS)
openCRX is vulnerable to Cross Site Scripting XSS. The vulnerability is due to a lack of validation in Create product name field, which allows an attacker to inject HTML into the application...
Cross Site Scripting (XSS)
org.opencrx: opencrx-core-models is vulnerable to HTML Injection. The vulnerability is due to a lack of proper input sanitization in the Product Configuration Name Field. This allows an attacker to inject malicious HTML into the application...
Cross Site Scripting (XSS)
openCRX is vulnerable to Cross Site Scripting XSS attack. The vulnerability is due to a lack of validation in the name field under an accounts group. An attacker can potentially use this vulnerability for phishing attacks, website defacement or DoS...
Cross Site Scripting (XSS)
OpenCRX is vulnerable to Cross Site Scripting XSS. The vulnerability is due to improper input sanitization and validation via the Activity Milestone Name Field. This can be exploited by the attacker to inject malicious JavaScript into the application...
Cross Site Scripting (XSS)
OpenCRX is vulnerable to Cross Site Scripting. The vulnerability is due to improper input sanitization and validation via the Activity Search Criteria Activity Number. This can be exploited by the attacker to inject malicious JavaScript into the application...
GHSA-CHJ5-8WXJ-RXG8 Cross-site Scripting in OpenCRX
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field...
GHSA-QJMX-Q5M4-XQF5 Cross-site Scripting in OpenCRX
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...
Cross-site Scripting in OpenCRX
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field...
Cross-site Scripting in OpenCRX
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field...
Cross-site Scripting in OpenCRX
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field...
Cross-site Scripting in OpenCRX
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...
Cross-site Scripting in OpenCRX
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation...
GHSA-5PHW-6G3R-55XX Cross-site Scripting in OpenCRX
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation...
GHSA-96Q4-7FWR-GMXH Cross-site Scripting in OpenCRX
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field...
GHSA-HHCF-79PM-R8R9 Cross-site Scripting in OpenCRX
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field...