← Database

CVE-2021-3539

MEDIUM CVSS: 6.3 Published: 2021-08-04 Modified: 2026-06-17

Description

EspoCRM 6.1.6 and prior suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in processing user-supplied avatar images. This issue was fixed in version 6.1.7 of the product.

Affected Platforms

Espocrm Espocrm

Weakness Type

CWE-79, CWE-79

References