CVE-2019-14221

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• 1CRM On-Premise Software 8.5.7 - Persistent Cross-Site Scripting2019-08-02 · webapps · php

Impact

1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/cccaaasser/1CRM-CVE/blob/master/CVE-2019-14221.md
• https://www.exploit-db.com/exploits/47206
• https://github.com/cccaaasser/1CRM-CVE/blob/master/CVE-2019-14221.md
• https://www.exploit-db.com/exploits/47206