Reflected XSS exists in client/res/templates/global-search/name-field.tpl in EspoCRM 5.3.6 via /#Account in the search panel.

Published Sep 21, 2018 · Updated Aug 5, 2024 · Assigned by mitre