CVE-2018-20975

MEDIUM

Fat Free CRM < 0.18.1 - Cross-Site Scripting in Tags Helper

Title source: llm

Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb.

Core 3

Core References

Release Notes x_refsource_confirm

Patch, Third Party Advisory x_refsource_confirm

Patch, Third Party Advisory x_refsource_confirm

CVSS v3 6.1

EPSS 0.0030

EPSS Percentile 53.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-79

Status published

Products (2)

fatfreecrm/fat_free_crm < 0.18.1

rubygems/fat_free_crm 0 - 0.18.1RubyGems

Published Aug 20, 2019

Tracked Since Feb 18, 2026