Description
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field.
Remediation
References
https://www.esecforte.com/cve-2023-40814-html-injection-accounts/
Related Vulnerabilities
CVE-2021-21181 Vulnerability in maven package org.webjars.npm:electron
CVE-2023-5654 Vulnerability in npm package react-devtools
CVE-2021-23450 Vulnerability in npm package dojo
CVE-2022-2466 Vulnerability in maven package io.quarkus:quarkus-smallrye-graphql
CVE-2021-39167 Vulnerability in npm package @openzeppelin/contracts