Multiple cross-site scripting (XSS) vulnerabilities in the Sales module of SugarCRM v6.5.18 allows attackers to execute arbitrary web scripts or HTML via crafted payloads entered into the primary address state or alternate address state input fields.
References
Link | Resource |
---|---|
https://www.vulnerability-lab.com/get_content.php?id=2249 | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2021-10-22T19:20:18
Updated: 2021-10-22T19:20:18
Reserved: 2020-11-19T00:00:00
Link: CVE-2020-28956
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-10-22T20:15:10.740
Modified: 2021-10-28T16:45:05.870
Link: CVE-2020-28956
JSON object: View
Redhat Information
No data.
CWE