Description
IDURAR (aka idurar-erp-crm) through 2.0.1 allows stored XSS via a PATCH request with a crafted JSON email template in the /api/email/update data.
Medium · 5.4
CVE-2023-52265
EUVD-2023-56938GHSA-h9qp-4fch-g5rw
IDURAR (aka idurar-erp-crm) through 2.0.1 allows stored XSS via a PATCH request with a crafted JSON email template in the /api/email/update…
Published Dec 30, 2023 · Updated Apr 17, 2025 · Assigned by mitre