CVE-2019-10226

HTML Injection has been discovered in the v0.19.0 version of the Fat Free CRM product via an authenticated request to the /comments URI

published June 10, 2019

CVSS
—
EPSS
5%
Percentile
91.8
In the wild
Unconfirmed
What it is

HTML Injection has been discovered in the v0.19.0 version of the Fat Free CRM product via an authenticated request to the /comments URI. NOTE: the vendor disputes the significance of this report because some HTML formatting (such as with an H1 element) is allowed, but there is a XSS protection mechanism.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04702 · 91.8th percentile
Published
2019-06-10T00:00Z
EPSS history
Timeline
  • 10 JUN 00:00Z
    HTML Injection has been discovered in the v0.19.0 version of the Fat Free CRM product via an authenticated request to the /comments URI
    cvelistv5