First published: Sat Nov 18 2023(Updated: )
OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field.
Credit: firstname.lastname@example.org email@example.com
|Affected Software||Affected Version||How to fix|
CVE-2023-40810 is a vulnerability in OpenCRX version 5.2.0 that allows HTML injection via the Product Name Field.
CVE-2023-40810 allows an attacker to perform HTML injection via the Product Name Field in OpenCRX version 5.2.0.
OpenCRX version 5.2.0 is affected by CVE-2023-40810.
CVE-2023-40810 has a CWE ID of 79.
Yes, you can find references for CVE-2023-40810 at the following links: (https://www.esecforte.com/cve-2023-40810-html-injection-product-creation/), (https://nvd.nist.gov/vuln/detail/CVE-2023-40810), (https://github.com/advisories/GHSA-gx82-jm5q-gfw2).