CVE-2023-27151

openCRX 5.2.0 was discovered to contain an HTML injection vulnerability for Search Criteria-Activity Number (in the Saved Search Activity) via the Name, Description, or Activity Number field.

Score

CVSS 3.1 6.1 Medium

Status

Analyzed - cve@mitre.org

Published

2024-02-29

Last modified

2024-08-23

Weaknesses

CWE-79

Affected products

• Opencrx (Opencrx)

References

• https://www.esecforte.com/cve-2023-27151-html-injection-activity-tracker/
• https://www.opencrx.org/