Zurmo Crm Security Vulnerabilities and Issues — Zurmo Crm CVE List

Lucene search

ZurmoZurmo Crm

2 matches found

CVE•added 2017/04/14 6:59 p.m.•34 views

CVE-2017-7188

Zurmo 3.1.1 Stable allows a Cross-Site Scripting (XSS) attack with a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/toggleCollapse.

5.4CVSS5.2AI score0.00933EPSS

CVE•added 2017/12/31 7:29 p.m.•33 views

CVE-2017-18004

Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint.

5.4CVSS5.2AI score0.00206EPSS