3.5
CVSSv2

CVE-2014-8330

Published: 20/10/2014 Updated: 22/10/2014
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in EspoCRM allows remote authenticated users to inject arbitrary web script or HTML via the Name field in a new account.

Vulnerable Product Search on Vulmon Subscribe to Product

espocrm espocrm -