SugarCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-0465)

Description

Cross-site scripting (XSS) vulnerability in the online Documents functionality in SugarCRM 5.2.x before 5.2.0l and 5.5.x before 5.5.0a allows remote authenticated users to inject arbitrary web script or HTML via the Document Name field.

Remediation

References

CVE-2010-0465

Related Vulnerabilities

WordPress Plugin Insert or Embed Articulate Content into WordPress Unspecified Vulnerability (4.299993)

WordPress 4.1.x Denial of Service Vulnerability (4.1 - 4.1.22)

Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-28982)

MySQL CVE-2015-2611 Vulnerability (CVE-2015-2611)

MySQL CVE-2020-14568 Vulnerability (CVE-2020-14568)

Severity

Medium

Classification

CVE-2010-0465 CWE-707