high7.1
CVE-2023-44915
A cross-site scripting (XSS) vulnerability in the component /Login.php of c3crm up to v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a cr…
Impact
A cross-site scripting (XSS) vulnerability in the component /Login.php of c3crm up to v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the login_error parameter.
Affected products
| Product | Affected versions |
|---|---|
| C3crm | before 3.0.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.