Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SugarCRM v6.5.18 was discovered to contain a cross-site scripting (XSS) vulnerability in the Create Employee module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the First Name or Last Name input fields.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sugarcrm SugarCRM 跨站脚本漏洞
Vulnerability Description
Sugarcrm SugarCRM是美国SugarCRM（Sugarcrm）公司的一套开源的客户关系管理系统（CRM）。该系统支持对不同的客户需求进行差异化营销、管理和分配销售线索，实现销售代表的信息共享和追踪。 SugarCRM存在安全漏洞，该漏洞允许攻击者可利用该漏洞通过在First Name或Last Name输入字段中精心设计的有效负载执行任意web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A