EUVD-2019-0619

Malware in sbrugna...

Cross-site Scripting (XSS)

fatfreecrm is vulnerable to cross-site scripting XSS. The vulnerability exists because it does not escape the string entered for query in app/helpers/tagshelper.rb, allowing an attacker to inject arbitrary script through it...

fat_free_crm XSS via query parameter of tags_helper method

Fat Free CRM before 0.18.1 has XSS in the tagshelper in app/helpers/tagshelper.rb...

CVE-2018-20975

Fat Free CRM before 0.18.1 has XSS in the tagshelper in app/helpers/tagshelper.rb...

CVE-2018-20975

Fat Free CRM before 0.18.1 has XSS in the tagshelper in app/helpers/tagshelper.rb...