CVE-2018-17302

Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /#Email/view saved draft message.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2018-09-21

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Espocrm (Espocrm)

References

• https://github.com/espocrm/espocrm/issues/1039
• https://github.com/security-breachlock/CVE-2018-17302/blob/master/XSS%20%28Stored%29%20in%20EspoCRM.pdf