Skip to content
OpenAdvisories
Unscored CVE-2018-14397 EUVD-2018-6315GHSA-grww-7x6r-3jq3

An issue was discovered in Creme CRM 1.6.12. The organization creation page is affected by 9 stored cross-site scripting vulnerabilities in…

Published Sep 7, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

An issue was discovered in Creme CRM 1.6.12. The organization creation page is affected by 9 stored cross-site scripting vulnerabilities involving the name, billing_address-address, billing_address-zipcode, billing_address-city, billing_address-department, shipping_address-address, shipping_address-zipcode, shipping_address-city, and shipping_address-department parameters.

References