4 matches found
CVE-2019-5963
Cross-site request forgery (CSRF) vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVE-2019-5962
Cross-site scripting vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2019-15645
The zoho-salesiq plugin before 1.0.9 for WordPress has CSRF.
CVE-2019-15644
The zoho-salesiq plugin before 1.0.9 for WordPress has stored XSS.