Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-5441
4.3
MEDIUMCVSS v2
Published
September 12, 2014
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Multiple cross-site scripting (XSS) vulnerabilities in app/views/layouts/application.html.haml in Fat Free CRM before 0.13.3 allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) first name, or (3) last name in a (a) create or (b) edit user action.
fatfreecrm/fat_free_crm
GitHubRuby on Rails CRM platform
GitHubRuby on Rails CRM platform= 0.12.1, <= 0.13.0, = 0.12.0, = 0.11.1, = 0.11.4, = 0.11.2, >= 0.11.1, < 0.13.3NVD