CVE-2023-45394

5.4 mediumEPSS 0.4%

Medium (5.4) in small crm project small crm. EPSS 0.4% chance of exploitation in the next 30 days.

Stored Cross-Site Scripting (XSS) vulnerability in the Company field in the "Request a Quote" Section of Small CRM v3.0 allows an attacker to store and execute malicious javascript code in the Admin panel which leads to Admin account takeover.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-10-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

small_crm_project:small_crm

References

https://github.com/kartik753/CVE/blob/main/CVE-2023-45394
https://github.com/kartik753/CVE/blob/main/CVE-2023-45394

Check your stack JSON