CVE-2018-17302

Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /Email/view saved draft message...

PT-2018-13979

Name of the Vulnerable Software and Affected Versions EspoCRM version 5.3.6 Description A stored XSS issue exists in the views/fields/wysiwyg.js file, which can be exploited via a /Email/view saved draft message. Recommendations For EspoCRM version 5.3.6, consider disabling the wysiwyg editor in...

CVE-2018-17302: Improper Neutralization of Input During Web Page Generation

Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /Email/view saved draft message...