CVE-2006-6712

SugarCRM Open Source versions 4.5.0f and earlier are affected by a Cross-Site Scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in crafted email messages, potentially executing in the victim’s browser and, per JVN, coul...