CVE-2022-48178

概要

参考情報

• packetstormsecurity.com/files/171792/X2CRM-6.6-6.9-Cross-Site-Scripting.html · Exploit
• sourceforge.net/projects/x2engine · Product

x2crm のその他の脆弱性

• CVE-2024-48120中 5.4X2CRM v8.5 is vulnerable to a stored Cross-Site Scripting (XSS) in the "Opportunities" module. An attacker can inject malicious JavaScript c…
• CVE-2022-48177中 5.4X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the adin/importMo…
• CVE-2021-33853中 5.4A Cross-Site Scripting (XSS) attack can cause arbitrary code (javascript) to run in a user’s browser while the browser is connected to a tru…
• CVE-2021-27288中 6.1Cross Site Scripting (XSS) in X2Engine X2CRM v7.1 allows remote attackers to obtain sensitive information by injecting arbitrary web script …
• CVE-2020-21088中 4.8Cross Site Scripting (XSS) in X2engine X2CRM v7.1 and older allows remote attackers to obtain sensitive information by injecting arbitrary w…