CVE-2018-17302

Published September 21st, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

3.5

LOW

Affected

1

PROJECT

Description

Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /#Email/view saved draft message.

espocrm/espocrm

EspoCRM – Open Source CRM Application

GitHub

3.07K