Security Advisory

CVE-2019-14350

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-07-28 15:26:58

Last updated 2024-08-05 00:12:43

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

EspoCRM 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the Knowledge base. A malicious attacker can inject JavaScript code in the body parameter during api/v1/KnowledgeBaseArticle knowledge-base record creation.

← Browse all CVEs View on cve.org ↗