CVE-2023-45394

Summary

CVE-2023-45394 is a Stored Cross-Site Scripting (XSS) vulnerability affecting the "Request a Quote" Section of Small CRM v3.0. Malicious JavaScript code can be injected into the Company field, which is then stored and executed in the Admin panel. Successful exploitation of this vulnerability can result in admin account takeover, posing a significant security risk. Attackers can leverage this issue to gain unauthorized access to sensitive information or perform unauthorized actions within the CRM system. Users are strongly advised to update their Small CRM installation to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.