CVE-2018-5715

phprint.php in SugarCRM 3.5.1 has XSS via a parameter name in the query string (aka a $key variable)

published January 16, 2018

CVSS
—
EPSS
7%
Percentile
94.0
In the wild
Unconfirmed
What it is

phprint.php in SugarCRM 3.5.1 has XSS via a parameter name in the query string (aka a $key variable).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06914 · 94.0th percentile
Published
2018-01-16T20:00Z
EPSS history
Timeline
  • 16 JAN 20:00Z
    phprint.php in SugarCRM 3.5.1 has XSS via a parameter name in the query string (aka a $key variable)
    cvelistv5