Description
An issue was discovered in EspoCRM before 5.6.6. There is stored XSS due to lack of filtration of user-supplied data in Create Task. A malicious attacker can modify the parameter name to contain JavaScript code.
Remediation
References
Related Vulnerabilities
MySQL CVE-2022-21286 Vulnerability (CVE-2022-21286)
WordPress Plugin Multicons [Multiple Favicons] Cross-Site Scripting (2.1)
phpMyAdmin 7PK - Security Features Vulnerability (CVE-2015-7873)
WordPress Plugin EME Sync Facebook Events Unspecified Vulnerability (1.0.38)
Apache Tomcat Improper Access Control Vulnerability (CVE-2016-5388)