← All advisories

Medium severity5.4OSV Advisory· Published Sep 21, 2018· Updated Jun 17, 2026

CVE-2018-17301

CVE-2018-17301

Description

Reflected XSS exists in client/res/templates/global-search/name-field.tpl in EspoCRM 5.3.6 via /#Account in the search panel.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Espocrm/Espocrmllm-fuzzy3 versions
=5.3.6+ 2 more
- (no CPE)range: =5.3.6
- cpe:2.3:a:espocrm:espocrm:5.3.6:*:*:*:*:*:*:*
- (no CPE)range: 1.0.0, 1.0.1, 1.1.0, …

Patches

Vulnerability mechanics

References

2

github.com/espocrm/espocrm/issues/1038nvdExploitIssue TrackingThird Party Advisory
github.com/security-breachlock/CVE-2018-17301/blob/master/Non-persistent%20XSS%20in%20EspoCRM.pdfnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.