CVE-2026-78337 in Prospero Flow CRM
Riassunto
di MITRE • 24/08/2026
Unrestricted Upload of File with Dangerous Type in the company logo upload in Roskus Prospero Flow CRM before 5.15.13 allows an authenticated user holding the create company and update company permissions to execute arbitrary JavaScript in the application origin via an SVG document containing an embedded script element.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.