← All advisories

Medium severity5.4OSV Advisory· Published Sep 21, 2018· Updated Jun 17, 2026

CVE-2018-17302

CVE-2018-17302

Description

Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /#Email/view saved draft message.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Espocrm/EspocrmOSV2 versions
1.0.0, 1.0.1, 1.1.0, …+ 1 more
- (no CPE)range: 1.0.0, 1.0.1, 1.1.0, …
- (no CPE)range: =5.3.6

Patches

Vulnerability mechanics

References

2

github.com/espocrm/espocrm/issues/1039nvdExploitIssue TrackingThird Party Advisory
github.com/security-breachlock/CVE-2018-17302/blob/master/XSS%20%28Stored%29%20in%20EspoCRM.pdfnvd

News mentions

0

No linked articles in our index yet.