Cross-site Scripting in OpenCRX

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-40817 · ADVISORY
• esecforte.com/cve-2023-40817-html-injection-product-configuration · WEB
• esecforte.com/cve-2023-40817-html-injection-product-configuration · Exploit

Weitere Schwachstellen in org.opencrx:opencrx-core-models

• CVE-2023-40816MITTEL 6.1OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field.
• CVE-2023-40815MITTEL 6.1OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field.
• CVE-2023-40814MITTEL 6.1OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field.
• CVE-2023-40813MITTEL 6.1OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation.
• CVE-2023-40812MITTEL 6.1OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field.