Vulnerabilities (CVE)

Filtered by vendor Idurar Project Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-52265 1 Idurar Project 1 Idurar 2024-01-11 N/A 5.4 MEDIUM
IDURAR (aka idurar-erp-crm) through 2.0.1 allows stored XSS via a PATCH request with a crafted JSON email template in the /api/email/update data.