CVE-2017-18004 Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint.
MediumCVSS 5.4
EPSS 0.63%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zurmo crm | = 3.2.3 | No fix listed |
References
- bitbucket.org exploit third-party-advisory