Description

SugarCRM before 10.1.0 (Q3 2020) allows XSS.

Remediation

References

CVE-2020-17372

Related Vulnerabilities

Oracle Database Server CVE-2010-0903 Vulnerability (CVE-2010-0903)

OpenSSL Cryptographic Issues Vulnerability (CVE-2019-1543)

WordPress Plugin Product Catalog for WordPress Unspecified Vulnerability (1.4.5)

WordPress Plugin WordPress Console Security Bypass (0.3.9)

WordPress Plugin WordPress Calls to Action Unspecified Vulnerability (2.3.1)

Severity

Medium

Classification

CVE-2020-17372 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities