CVE-2023-45394

MEDIUM

5.4

Description

Stored Cross-Site Scripting (XSS) vulnerability in the Company field in the "Request a Quote" Section of Small CRM v3.0 allows an attacker to store and execute malicious javascript code in the Admin panel which leads to Admin account takeover.

Details CVE

Score CVSS v3.15.4

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisLOW

Interaction utilisateurREQUIRED

Publie10/20/2023

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

small_crm_project:small_crm

Faiblesses (CWE)

CWE-79

References

https://github.com/kartik753/CVE/blob/main/CVE-2023-45394(cve@mitre.org)

https://github.com/kartik753/CVE/blob/main/CVE-2023-45394(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.