← All advisories

Medium severity5.4NVD Advisory· Published Dec 31, 2017· Updated Jun 17, 2026

CVE-2017-18004

CVE-2017-18004

Description

Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint.

Affected products

3

Zurmo/Zurmo CRMreferences3 versions
(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:zurmo:zurmo_crm:3.2.3:*:*:*:*:*:*:*
- (no CPE)range: =3.2.3

Patches

Vulnerability mechanics

References

1

bitbucket.org/zurmo/zurmo/issues/436/to-report-a-xss-security-vulnerability-innvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.