CVE-2015-5365

Cross-site scripting (XSS) vulnerability in Zurmo CRM 3.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "What's going on?"…

published July 2, 2015

CVSS
—
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in Zurmo CRM 3.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "What's going on?" profile field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01121 · 65.9th percentile
Published
2015-07-02T14:42Z
EPSS history
Timeline
  • 02 JUL 14:42Z
    Cross-site scripting (XSS) vulnerability in Zurmo CRM 3.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "What's going on?"…
    cvelistv5