Description
Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | fat_free_crm | < 0.18.1 | 0.18.1 | GHSA-4p8f-mmfj-r45g |
Medium · 6.1
CVE-2018-20975
EUVD-2019-0619GHSA-4p8f-mmfj-r45g
Cross-site scripting in fat_free_crm
Published Aug 20, 2019 · Updated Aug 5, 2024 · Assigned by mitre