CVE-2013-5693

MEDIUM 4.3CVE-2013-5693 · Published 30/09/2013 · updated 16/06/2026

In short

CVE-2013-5693 is a MEDIUM (CVSS 4.3) vulnerability affecting x2crm (x2engine).
Chance of exploitation in the next 30 days (EPSS): 3.2%, higher than 88.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
x2crm x2engine	`= 1.0= 1.0.1= 1.1.0= 1.2.0= 1.2.1= 1.2.2= 1.3= 1.3.1= 2.2= 2.2.1= 2.5= 2.5.2= 2.7= 2.7.1= 2.7.2= 2.8= 2.8.1= 2.9= 2.9.1= 3.0= 3.0.1= 3.0.2= 3.1= 3.1.1= 3.1.2= 3.2= 3.3= 3.3.1= 3.3.2= 3.4≤ 3.4.1`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in X2Engine X2CRM before 3.5 allows remote attackers to inject arbitrary web script or HTML via the model parameter to index.php/admin/editor.

References

archives.neohapsis.com/archives/bugtraq/2013-09/0117.html
osvdb.org/97366
exploit-db.com/exploits/28557 · Exploit
htbridge.com/advisory/HTB23172 · Exploit

More vulnerabilities in x2crm

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

x2crm

x2engine

= 1.0= 1.0.1= 1.1.0= 1.2.0= 1.2.1= 1.2.2= 1.3= 1.3.1= 2.2= 2.2.1= 2.5= 2.5.2= 2.7= 2.7.1= 2.7.2= 2.8= 2.8.1= 2.9= 2.9.1= 3.0= 3.0.1= 3.0.2= 3.1= 3.1.1= 3.1.2= 3.2= 3.3= 3.3.1= 3.3.2= 3.4≤ 3.4.1

No fix yet

More vulnerabilities in x2crm

See all →