← All credits
Adrián García López
4 vulnerability records and advisories credit this contributor.
CVE-2026-81931
Unrestricted upload of file with dangerous type in Prospero Flow CRM product photo allows stored cross-site scripting
CVE-2026-78337
Unrestricted upload of file with dangerous type in Prospero Flow CRM allows stored cross-site scripting via SVG
CVE-2026-77780
Unvalidated bank account and card foreign keys in the Prospero Flow CRM transaction save endpoint allow cross-tenant disclosure of banking identifiers
CVE-2026-19871
Use of hard-coded credentials in Prospero Flow CRM employee onboarding