Cross Site Scripting (XSS)

2022-09-2016:08:26

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

yetiforcecrm

stored cross-site scripting

vulnerability

workflowmodel

EPSS

0.001

Percentile

21.4%

JSON

Yetiforcecrm is vulnerable to stored cross-site scripting. The vulnerability is due to the workflowModel not sanitizing the summary field, allowing an attacker to inject script tags via the workflow module settings, which results in stored cross-site scripting.