Description

Cross-site scripting (XSS) vulnerability in the online Documents functionality in SugarCRM 5.2.x before 5.2.0l and 5.5.x before 5.5.0a allows remote authenticated users to inject arbitrary web script or HTML via the Document Name field.

Remediation

References

CVE-2010-0465

Related Vulnerabilities

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-6335)

WordPress 4.9.x Denial of Service Vulnerability (4.9 - 4.9.4)

WordPress Plugin Exit Popups & Onsite Retargeting by OptiMonk Cross-Site Scripting (1.2.5)

WebLogic CVE-2018-1257 Vulnerability (CVE-2018-1257)

Oracle JRE CVE-2013-5801 Vulnerability (CVE-2013-5801)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2010-0465