Cross Site Scripting Vulnerability in FatFreeCRM by Asteinhauser
CVE-2018-1000842

6.1MEDIUM

Key Information:

Vendor: Fatfreecrm
Status: Fatfreecrm
Vendor: CVE Published:; 20 December 2018

What is CVE-2018-1000842?

FatFreeCRM versions ranging from 0.14.1 to 0.18.0 contain a Cross Site Scripting (XSS) vulnerability that allows the execution of Javascript payloads on users' browsers. This can occur when users visit pages with content that contains embedded Javascript. The vulnerability was introduced in a specific commit and has been addressed in subsequent patches, with fixed versions including 0.18.1, 0.17.3, 0.16.4, 0.15.2, and 0.14.2.