medium6.1
CVE-2019-15950
The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data.
Impact
The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redmineup | Crm | before 4.2.4 |