medium5.4
CVE-2023-6128
Cross-site Scripting (XSS) - Reflected in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.
Impact
Cross-site Scripting (XSS) - Reflected in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Salesagility | Suitecrm | before 7.12.14 Versions 7.14.0, 7.14.1, 8.4.0, 8.4.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/salesagility/suitecrm/commit/54bc56c3bd9f1db75408db1c1d7d652c3f5f71e9
- https://huntr.com/bounties/51406547-1961-45f2-a416-7f14fd775d2d
- https://github.com/salesagility/suitecrm/commit/54bc56c3bd9f1db75408db1c1d7d652c3f5f71e9
- https://huntr.com/bounties/51406547-1961-45f2-a416-7f14fd775d2d