Medium severity6.1NVD Advisory· Published Jul 18, 2019· Updated Jun 17, 2026
CVE-2019-13643
CVE-2019-13643
Description
Stored XSS in EspoCRM before 5.6.4 allows remote attackers to execute malicious JavaScript and inject arbitrary source code into the target pages. The attack begins by storing a new stream message containing an XSS payload. The stored payload can then be triggered by clicking a malicious link on the Notifications page.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- EspoCRM/EspoCRMdescription
Patches
Vulnerability mechanics
References
1- github.com/espocrm/espocrm/issues/1349nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.