CVE

CVE-2023-25440

CVE-2023-25440

Stored Cross Site Scripting (XSS) vulnerability in the add contact function CiviCRM 5.59.alpha1, allows attackers to execute arbitrary code in first/second name field.

Source: CVE-2023-25440

Exit mobile version