← All advisories

Medium severity4.8NVD Advisory· Published Dec 19, 2018· Updated Jun 17, 2026

CVE-2018-19596

CVE-2018-19596

Description

Zurmo 3.2.4 allows HTML Injection via an admin's use of HTML in the report section, a related issue to CVE-2018-19506.

Affected products

3

Zurmo/Zurmo CRMinferred3 versions
= 3.2.4+ 2 more
- (no CPE)range: = 3.2.4
- cpe:2.3:a:zurmo:zurmo:3.2.4:*:*:*:*:*:*:*
- (no CPE)range: <3.2.4

Patches

Vulnerability mechanics

References

1

github.com/security-breachlock/CVE-2018-19596/blob/master/Zurmo_PS%20%281%29.pdfnvd

News mentions

0

No linked articles in our index yet.