Multiple cross-site scripting (XSS) vulnerabilities in the Support module of SugarCRM v6.5.18 allows attackers to execute arbitrary web scripts or HTML via crafted payloads entered into the primary address state or alternate address state input fields.
References
Link | Resource |
---|---|
https://www.vulnerability-lab.com/get_content.php?id=2249 | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2021-10-22T19:19:54
Updated: 2021-10-22T19:19:54
Reserved: 2021-10-20T00:00:00
Link: CVE-2020-36501
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-10-22T20:15:11.690
Modified: 2021-10-26T14:19:57.217
Link: CVE-2020-36501
JSON object: View
Redhat Information
No data.
CWE