VYPR
Unrated severityNVD Advisory· Published Jun 27, 2023· Updated Nov 27, 2024

Catalyst Connect Zoho CRM Client Portal < 2.1.0 - Reflected XSS

CVE-2023-0588

Description

The Catalyst Connect Zoho CRM Client Portal WordPress plugin before 2.1.0 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high-privilege users such as admin.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.