Description
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.opencrx:opencrx-core-models | <= 5.2.0 | — | GHSA-qjmx-q5m4-xqf5 |
Medium · 6.1
CVE-2023-40816
EUVD-2023-3017GHSA-qjmx-q5m4-xqf5
Cross-site Scripting in OpenCRX
Published Nov 18, 2023 · Updated Aug 28, 2024 · Assigned by mitre