Medium · 6.1 CVE-2022-23791 EUVD-2022-28727GHSA-353j-v352-7rj6

XSS in Firmanet Software and Technology Customer Relation Manager

Published Mar 14, 2023 · Updated May 20, 2026 · Assigned by TR-CERT

Vendor: Firmanet Software and Technology Product: Customer Relation Manager

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firmanet Software and Technology Customer Relation Manager allows Cross-Site Scripting (XSS).

This issue affects Customer Relation Manager: before 2022.03.13.

Affected products

Vendor	Product	Affected	Fixed
Firmanet Software and Technology	Customer Relation Manager	< 2022.03.13	2022.03.13

References

https://www.usom.gov.tr/bildirim/tr-23-0145 government-resource broken-link
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0145 government-resource