CVE-2018-7997

Publication date

2018-03-09 16:00:00

Family

mitre

State

PUBLISHED

Description

Eramba e1.0.6.033 has Reflected XSS on the Error page of the CSV file inclusion tab of the /importTool/preview URI, with a CSV file polluted with malicious JavaScript.