PatchTheCVE: zurmo

PatchTheCVE: zurmohttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2019-14472: Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATH_INFO.https://patchthecve.com/cve/CVE-2019-14472.htmlhttps://patchthecve.com/cve/CVE-2019-14472.htmlWed, 17 Jun 2026 02:18:29 +0000MEDIUM 6.1: Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATH_INFO.CVE-2018-19596: Zurmo 3.2.4 allows HTML Injection via an admin's use of HTML in the report section, a related issue to CVE-201https://patchthecve.com/cve/CVE-2018-19596.htmlhttps://patchthecve.com/cve/CVE-2018-19596.htmlWed, 17 Jun 2026 01:49:34 +0000MEDIUM 4.8: Zurmo 3.2.4 allows HTML Injection via an admin's use of HTML in the report section, a related issue to CVE-2018-19506.CVE-2018-19506: Zurmo 3.2.4 has XSS via an admin's use of the name parameter in the reports section, aka the app/index.php/rephttps://patchthecve.com/cve/CVE-2018-19506.htmlhttps://patchthecve.com/cve/CVE-2018-19506.htmlWed, 17 Jun 2026 01:49:24 +0000MEDIUM 4.8: Zurmo 3.2.4 has XSS via an admin's use of the name parameter in the reports section, aka the app/index.php/reports/default/details?id=1 URI.