wbowm15

1 exploit Active since Dec 2023
CVE-2023-52265 WRITEUP MEDIUM WRITEUP
idurar < 2.0.1 - Stored Cross-Site Scripting via Email Template PATCH Request
IDURAR (aka idurar-erp-crm) through 2.0.1 allows stored XSS via a PATCH request with a crafted JSON email template in the /api/email/update data.
CVSS 5.4