Thinkingreed Inc. F-RevoCRM

• CVE-2026-71368 Medium 6.1 F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged in to the affected product, unintended operations may be performed. 0.3%
• CVE-2023-41150 Unrated F-RevoCRM 7.3 series prior to version7.3.8 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is 0.4%
• CVE-2023-41149 Unrated F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability. If this vulnerability is exploited, an attacker who can access the product may execute an arbitrary OS command o 1.5%