Description
Reflected XSS exists in client/res/templates/global-search/name-field.tpl in EspoCRM 5.3.6 via /#Account in the search panel.
Remediation
References
Related Vulnerabilities
WebLogic CVE-2019-2418 Vulnerability (CVE-2019-2418)
WordPress Plugin WP-ViperGB Cross-Site Scripting (1.3.15)
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-4306)
WordPress Plugin iThemes Security (formerly Better WP Security) Unspecified Vulnerability (6.9.0)
WordPress Plugin WordPress Photo Gallery by Gallery Bank SQL Injection (3.0.229)