Description
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field.
Remediation
References
https://www.esecforte.com/cve-2023-40815-html-injection-category/
Related Vulnerabilities
CVE-2017-16021 Vulnerability in npm package uri-js
CVE-2020-8186 Vulnerability in npm package devcert
CVE-2018-5673 Vulnerability in maven package org.webjars.bower:dojo
CVE-2020-17527 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2020-26217 Vulnerability in maven package xstream:xstream