Vulnerabilities > Fatfreecrm
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-10-08 | CVE-2022-39281 | Unspecified vulnerability in Fatfreecrm fat_free_crm is a an open source, Ruby on Rails customer relationship management platform (CRM). | 6.5 |
| 2019-08-20 | CVE-2018-20975 | Cross-site Scripting vulnerability in Fatfreecrm FAT Free CRM Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb. | 6.1 |
| 2019-06-10 | CVE-2019-10226 | Cross-site Scripting vulnerability in Fatfreecrm FAT Free CRM 0.19.0 HTML Injection has been discovered in the v0.19.0 version of the Fat Free CRM product via an authenticated request to the /comments URI. | 5.4 |
| 2018-12-20 | CVE-2018-1000842 | Cross-site Scripting vulnerability in Fatfreecrm FatFreeCRM version <=0.14.1, >=0.15.0 <=0.15.1, >=0.16.0 <=0.16.3, >=0.17.0 <=0.17.2, ==0.18.0 contains a Cross Site Scripting (XSS) vulnerability in commit 6d60bc8ed010c4eda05d6645c64849f415f68d65 that can result in Javascript execution. | 6.1 |