← CVE Intelligence

CVE-2021-3539

EspoCRM Avatar Persistent XSS PUBLISHED

Description (CNA)

EspoCRM 6.1.6 and prior suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in processing user-supplied avatar images. This issue was fixed in version 6.1.7 of the product.

Affected (CNA)

Vendor / productVersions
EspoCRM / EspoCRMaffected 6.1.6 through 6.1.6

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.