Description

Cross-site scripting (XSS) vulnerability in EspoCRM before 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the desc parameter in an errors action to install/index.php.

Remediation

References

CVE-2014-7987

Related Vulnerabilities

WordPress Plugin Total Security Multiple Unspecified Vulnerabilities (3.4.1)

WordPress Plugin The Post Grid-Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid Cross-Site Request Forgery (5.0.4)

WordPress Plugin YITH Product Size Charts for WooCommerce Security Bypass (1.1.11)

WordPress Other Vulnerability (CVE-2007-0233)

WordPress Plugin Google Shortlink by BestWebSoft Cross-Site Scripting (1.5.2)

Severity

Medium

Classification

CVE-2014-7987 CWE-707

Tags

Missing Update Known Vulnerabilities