CVE-2018-20975 (fat_free_crm): fat_free_crm XSS via query parameter of tags_helper method

August 21st, 2019

ADVISORIES

GEM

SEVERITY

CVSS v3.x: 6.1 (Medium)

PATCHED VERSIONS

>= 0.18.1

DESCRIPTION

Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb.