Security Advisory
CVE-2023-25440
5.4
MEDIUM
Vulnerability Description
Stored Cross Site Scripting (XSS) vulnerability in the add contact function CiviCRM 5.59.alpha1, allows attackers to execute arbitrary code in first/second name field.
Published Date
May 23, 2023
Official Source
NIST NVD Advisory