Lucene search
Veracode Vulnerability DatabaseVERACODE:21351HistoryAug 21, 2019 - 7:11 a.m.
Cross-site Scripting (XSS)
2019-08-2107:11:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
38.7%
fat_free_crm is vulnerable to cross-site scripting (XSS). The vulnerability exists because it does not escape the string entered for query in app/helpers/tags_helper.rb, allowing an attacker to inject arbitrary script through it.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fat_free_crm | le | 0.18.0 |
Related
cve
cve
CVE-2018-20975
2019-08-20 13:15:11
cvelist
cvelist
CVE-2018-20975
2019-08-20 12:14:26
nvd
nvd
CVE-2018-20975
2019-08-20 13:15:11
osv
osv
CVE-2018-20975
2019-08-20 13:15:11
Cross-site scripting in fat_free_crm
2019-08-21 16:15:04
prion
prion
Design/Logic Flaw
2019-08-20 13:15:00
github
github
Cross-site scripting in fat_free_crm
2019-08-21 16:15:04