Security Advisory

CVE-2023-52265

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-12-30 00:00:00
Last updated 2025-04-17 20:00:42
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

IDURAR (aka idurar-erp-crm) through 2.0.1 allows stored XSS via a PATCH request with a crafted JSON email template in the /api/email/update data.