Description
Cross-site scripting (XSS) vulnerability in the online Documents functionality in SugarCRM 5.2.x before 5.2.0l and 5.5.x before 5.5.0a allows remote authenticated users to inject arbitrary web script or HTML via the Document Name field.
Remediation
References
Related Vulnerabilities
WordPress Plugin WooCommerce Upload Files Arbitrary File Upload (59.3)
Jboss EAP Credentials Management Errors Vulnerability (CVE-2012-0034)
Joomla! Core 3.x.x Information Disclosure (3.0.0 - 3.9.19)
Drupal Other Vulnerability (CVE-2006-5476)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-5835)