Description
Cross Site Scripting (XSS) in the contact page of Group Office CRM 6.4.196 by uploading a crafted svg file.
References
https://fatihhcelik.blogspot.com/2020/12/group-office-crm-stored-xss-via-svg-file.html
ExploitIssue TrackingThird Party Advisory
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
5.4 · Medium
CVSS V3.1
CVSS V3.0
CVSS V2.0
Information
Source identifier
Vulnerability status
Analyzed
Published
2021-04-14T17:15:13.940
4 years agoLast modified
2021-04-19T19:20:15.067
4 years ago