PatchTheCVE: opencrxhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-27151: openCRX 5.2.0 was discovered to contain an HTML injection vulnerability for Search Criteria-Activity Number (ihttps://patchthecve.com/cve/CVE-2023-27151.htmlhttps://patchthecve.com/cve/CVE-2023-27151.htmlWed, 17 Jun 2026 05:44:27 +0000MEDIUM 6.1: openCRX 5.2.0 was discovered to contain an HTML injection vulnerability for Search Criteria-Activity Number (in the Saved Search Activity) via the Name, Description, or Activity Number field.CVE-2023-27150: openCRX 5.2.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name field after crhttps://patchthecve.com/cve/CVE-2023-27150.htmlhttps://patchthecve.com/cve/CVE-2023-27150.htmlWed, 17 Jun 2026 05:44:27 +0000MEDIUM 5.4: openCRX 5.2.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name field after creation of a Tracker in Manage Activity.CVE-2023-40817: OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field.https://patchthecve.com/cve/CVE-2023-40817.htmlhttps://patchthecve.com/cve/CVE-2023-40817.htmlWed, 17 Jun 2026 06:19:35 +0000MEDIUM 6.1: OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field.CVE-2023-40816: OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field.https://patchthecve.com/cve/CVE-2023-40816.htmlhttps://patchthecve.com/cve/CVE-2023-40816.htmlWed, 17 Jun 2026 06:19:35 +0000MEDIUM 6.1: OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field.CVE-2023-40815: OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field.https://patchthecve.com/cve/CVE-2023-40815.htmlhttps://patchthecve.com/cve/CVE-2023-40815.htmlWed, 17 Jun 2026 06:19:35 +0000MEDIUM 6.1: OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field.CVE-2023-40814: OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field.https://patchthecve.com/cve/CVE-2023-40814.htmlhttps://patchthecve.com/cve/CVE-2023-40814.htmlWed, 17 Jun 2026 06:19:34 +0000MEDIUM 6.1: OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field.CVE-2023-40813: OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation.https://patchthecve.com/cve/CVE-2023-40813.htmlhttps://patchthecve.com/cve/CVE-2023-40813.htmlWed, 17 Jun 2026 06:19:34 +0000MEDIUM 6.1: OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation.CVE-2023-40812: OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field.https://patchthecve.com/cve/CVE-2023-40812.htmlhttps://patchthecve.com/cve/CVE-2023-40812.htmlWed, 17 Jun 2026 06:19:33 +0000MEDIUM 6.1: OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field.CVE-2023-40810: OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field.https://patchthecve.com/cve/CVE-2023-40810.htmlhttps://patchthecve.com/cve/CVE-2023-40810.htmlWed, 17 Jun 2026 06:19:33 +0000MEDIUM 6.1: OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field.CVE-2023-40809: OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number.https://patchthecve.com/cve/CVE-2023-40809.htmlhttps://patchthecve.com/cve/CVE-2023-40809.htmlWed, 17 Jun 2026 06:19:33 +0000MEDIUM 6.1: OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number.CVE-2023-46502: An issue in openCRX v.5.2.2 allows a remote attacker to read internal files and execute server side request fohttps://patchthecve.com/cve/CVE-2023-46502.htmlhttps://patchthecve.com/cve/CVE-2023-46502.htmlWed, 17 Jun 2026 06:30:59 +0000CRITICAL 9.8: An issue in openCRX v.5.2.2 allows a remote attacker to read internal files and execute server side request forgery attack via insecure DocumentBuilderFactory.