CVE-2019-6036

Cross-site scripting vulnerability in F-RevoCRM 6.0 to F-RevoCRM 6.5 patch6 (version 6 series) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Score

CVSS 3.1 6.1 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2020-01-27

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• F-revocrm (F-revocrm)
• F-revocrm (Thinkingreed Inc.)

References

• http://jvn.jp/en/jp/JVN97325754/index.html
• https://f-revocrm.jp/2019/12/9393