Description

Cross-site scripting (XSS) vulnerability in the online Documents functionality in SugarCRM 5.2.x before 5.2.0l and 5.5.x before 5.5.0a allows remote authenticated users to inject arbitrary web script or HTML via the Document Name field.

Remediation

References

CVE-2010-0465

Related Vulnerabilities

jQuery Validation Uncontrolled Resource Consumption Vulnerability (CVE-2021-21252)

MySQL CVE-2020-14846 Vulnerability (CVE-2020-14846)

MySQL CVE-2019-2802 Vulnerability (CVE-2019-2802)

Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-2930)

WordPress Plugin Gallery by BestWebSoft 'php.php' Arbitrary File Upload (3.06)

Severity

Medium

Classification

CVE-2010-0465 CWE-707

Tags

Missing Update Known Vulnerabilities