Skip to content
OpenAdvisories
Medium · 6.1 CVE-2026-71368 EUVD-2026-63208GHSA-2j3p-r8gw-592c

F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged in to the affected product, unintended…

Published Aug 20, 2026 · Updated Aug 27, 2026 · Assigned by jpcert

Description

F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged in to the affected product, unintended operations may be performed.

Affected products

VendorProductAffectedFixed
Thinkingreed F-RevoCRM 7.3.0 through 8.0.3 —

References