CVE-2023-3505

Summary

CVE-2023-3501: A cross-site scripting (XSS) vulnerability was identified in the Project List Handler component of Onest CRM 1.0. This issue, classified as problematic, can be exploited by manipulating the argument name with the input <script>alert(1)</script> in the /admin/project/update/2 file. The vulnerability is remote, meaning it can be initiated from an external source. The vendor, Onest CRM, was notified but did not respond to the disclosure, and the vulnerability has been assigned the identifier VDB-232953.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.