Fat Free CRM before 0.18.1 has XSS in the tagshelper in app/helpers/tagshelper.rb.
{
"cpe": "cpe:2.3:a:fatfreecrm:fat_free_crm:*:*:*:*:*:*:*:*",
"source": [
"CPE_RANGE",
"REFERENCES"
],
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "0.18.1"
}
]
}