PT-2020-11984
CVE-2020-10227
·
تاريخ النشر
2020-09-14
·
تاريخ التحديث
2020-09-18
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
vtecrm vtenext version 19 CE
Description
A cross-site scripting (XSS) issue in the messages module allows attackers to inject arbitrary JavaScript code via the
From field of an email.Recommendations
For version 19 CE, consider restricting access to the messages module until a fix is available, and avoid using the
From field in emails to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾