Description
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field.
Remediation
References
https://www.esecforte.com/cve-2023-40812-html-injection-accounts-group/
Related Vulnerabilities
CVE-2021-23379 Vulnerability in npm package portkiller
CVE-2018-1000136 Vulnerability in maven package org.webjars.npm:electron
CVE-2022-29078 Vulnerability in maven package org.webjars.npm:ejs
CVE-2021-35513 Vulnerability in maven package org.webjars.npm:mermaid
CVE-2021-39147 Vulnerability in maven package com.thoughtworks.xstream:xstream