Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-52265
5.4
MEDIUMCVSS v3
Published
December 30, 2023
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
IDURAR (aka idurar-erp-crm) through 2.0.1 allows stored XSS via a PATCH request with a crafted JSON email template in the /api/email/update data.
salahlalami/idurar-erp-crm
GitHubFree Open Source ERP CRM Software Accounting Invoicing | Node.Js React
GitHubFree Open Source ERP CRM Software Accounting Invoicing | Node.Js ReactNVD
idurar/idurar-erp-crmGitHubFree Open Source ERP CRM Software Accounting Invoicing | Node.Js React
GitHubFree Open Source ERP CRM Software Accounting Invoicing | Node.Js ReactNVD