CVE-2026-10567 | 1Panel-dev CordysCRM up to 1.4.1 ModuleFormController ModuleFormService.java save Description cross site scripting (Issue 2233)

A vulnerability was found in 1Panel-dev CordysCRM up to 1.4.1. It has been classified as problematic. This impacts the function Save of the file src/main/java/cn/cordys/crm/system/service/ModuleFormService.java of the component ModuleFormController. The manipulation of the argument Description leads to cross site scripting.

This vulnerability is listed as CVE-2026-10567. The attack may be initiated remotely. In addition, an exploit is available.

Upgrading the affected component is recommended.