Cross-Site Scripting Vulnerability in Fat Free CRM by Fat Free CRM

CVE-2014-5441

What is CVE-2014-5441?

Multiple cross-site scripting vulnerabilities exist in Fat Free CRM prior to version 0.13.3. These vulnerabilities allow remote attackers to inject arbitrary web scripts or HTML content via manipulation of user input fields, specifically the username, first name, or last name, during user creation or editing processes. This can lead to unauthorized actions, data theft, or defacement, emphasizing the necessity for timely updates and proper input validation to mitigate potential exploits.

References