CVE-2023-45394

Stored Cross-Site Scripting (XSS) vulnerability in the Company field in the "Request a Quote" Section of Small CRM v3.0 allows an attacker to store and execute…

published October 20, 2023

CVSS
—
EPSS
0%
Percentile
34.7
In the wild
Unconfirmed
What it is

Stored Cross-Site Scripting (XSS) vulnerability in the Company field in the "Request a Quote" Section of Small CRM v3.0 allows an attacker to store and execute malicious javascript code in the Admin panel which leads to Admin account takeover.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00414 · 34.7th percentile
Published
2023-10-20T00:00Z
EPSS history
Timeline
  • 20 OCT 00:00Z
    Stored Cross-Site Scripting (XSS) vulnerability in the Company field in the "Request a Quote" Section of Small CRM v3.0 allows an attacker to store and execute…
    cvelistv5