CVE-2021-3539

Published: 2021-08-04T23:15Z

Last Modified: 2024-11-21T06:21Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

EspoCRM 6.1.6 and prior suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in processing user-supplied avatar images. This issue was fixed in version 6.1.7 of the product. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt