Vulners
Lucene search
5 matches found
EUVD-2019-0619
Malware in sbrugna...
6.1CVSS6.1AI score0.00295EPSS
Exploits0References6
Cross-site Scripting (XSS)
fatfreecrm is vulnerable to cross-site scripting XSS. The vulnerability exists because it does not escape the string entered for query in app/helpers/tagshelper.rb, allowing an attacker to inject arbitrary script through it...
6.1CVSS2.9AI score0.00295EPSS
Exploits0References3Affected Software1
fat_free_crm XSS via query parameter of tags_helper method
Fat Free CRM before 0.18.1 has XSS in the tagshelper in app/helpers/tagshelper.rb...
6.1CVSS3.3AI score0.00295EPSS
Exploits0References1Affected Software1
CVE-2018-20975
Fat Free CRM before 0.18.1 has XSS in the tagshelper in app/helpers/tagshelper.rb...
6.1CVSS6AI score
Exploits0References3
CVE-2018-20975
Fat Free CRM before 0.18.1 has XSS in the tagshelper in app/helpers/tagshelper.rb...
6.1CVSS6AI score0.00295EPSS
Exploits0References3
20