Telaxus EPESI cross-site scripting vulnerability (CNVD-2017-11057)

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-site scripting vulnerability exists in the...

CVE-2017-9366: Improper Neutralization of Input During Web Page Generation

Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting XSS vulnerability in modules/Base/Dashboard/Dashboard0.php, which allows remote attackers to inject arbitrary web script or HTML via a crafted tabname parameter...