Description

SugarCRM before 10.1.0 (Q3 2020) allows XSS.

Remediation

References

CVE-2020-17372

Related Vulnerabilities

PHP Other Vulnerability (CVE-2002-2214)

WordPress Plugin IMPress Listings Cross-Site Scripting (2.0.1)

Oracle Database Server CVE-2012-1747 Vulnerability (CVE-2012-1747)

WordPress Plugin LeagueManager Multiple Cross-Site Scripting Vulnerabilities (3.7)

WordPress Plugin Auto Prune Posts Cross-Site Request Forgery (1.8.0)

Severity

Medium

Classification

CVE-2020-17372 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities