CVE-2017-14712

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2017-09-22

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Epesi (Telaxius)

References

• https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830
• https://www.exploit-db.com/exploits/42950/