Description
services/system_io/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary client-side JavaScript code execution (involving a ContactCommon field) on victims who click on a crafted link, aka XSS.
Unscored
CVE-2017-11727
EUVD-2017-3337GHSA-4vjw-6g94-68x5
services/system_io/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary client-side JavaScript code execution (invol…
Published Jul 31, 2017 · Updated Aug 5, 2024 · Assigned by mitre