| शीर्षक | https://github.com/1Panel-dev/CordysCRM CordysCRM v1.4.1 stored XSS |
|---|
| विवरण | A stored cross-site scripting (XSS) vulnerability exists in the CustomerFollowRecordController component of CordysCRM v1.4.1. This vulnerability stems from the add() method's failure to adequately validate or encode the content parameter when handling requests to save customer follow-up records. A remote attacker could exploit the /account/follow/record/add interface to submit malicious JavaScript code. When the user clicks to view customer follow-up records, the malicious script will execute in their browser environment. |
|---|
| स्रोत | ⚠️ https://github.com/1Panel-dev/CordysCRM/issues/2239 |
|---|
| उपयोगकर्ता | DaytimeHeaven (UID 96977) |
|---|
| सबमिशन | 14/05/2026 09:09 AM (5 महीनों पहले) |
|---|
| संयम | 02/06/2026 03:50 PM (19 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 367674 [1Panel-dev CordysCRM तक 1.4.1 ModuleFormController ModuleFormService.java save description क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 0 |
|---|