2.0.1

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-30	CVE-2023-52265	Cross-site Scripting vulnerability in Idurarapp Idurar 1.0.0/2.0.0/2.0.1 IDURAR (aka idurar-erp-crm) through 2.0.1 allows stored XSS via a PATCH request with a crafted JSON email template in the /api/email/update data. network low complexity idurarapp CWE-79	5.4

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.