| Package | Affected versions | Patched versions |
|---|---|---|
| x2crm | = 8.5 |
X2CRM v8.5 is vulnerable to a stored Cross-Site Scripting (XSS) in the "Opportunities" module. An attacker can inject malicious JavaScript code into the "Name" field when creating a list.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free