CVE-2018-17302

Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /#Email/view saved draft message

published September 21, 2018

CVSS
—
EPSS
1%
Percentile
49.6
In the wild
Unconfirmed
What it is

Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /#Email/view saved draft message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00632 · 49.6th percentile
Published
2018-09-21T06:00Z
EPSS history
Timeline
  • 21 SEP 06:00Z
    Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /#Email/view saved draft message
    cvelistv5