Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3q54-fg6h-32ch

Опубликовано: 13 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Vtiger CRM 8.4.0 contains a reflected cross-site scripting (XSS) vulnerability in the MailManager module. Improper handling of user-controlled input in the _folder parameter allows a specially crafted, double URL-encoded payload to be reflected and executed in the context of an authenticated user s session.

Vtiger CRM 8.4.0 contains a reflected cross-site scripting (XSS) vulnerability in the MailManager module. Improper handling of user-controlled input in the _folder parameter allows a specially crafted, double URL-encoded payload to be reflected and executed in the context of an authenticated user s session.

EPSS

Процентиль: 3%
0.00138
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
5 месяцев назад

Vtiger CRM 8.4.0 contains a reflected cross-site scripting (XSS) vulnerability in the MailManager module. Improper handling of user-controlled input in the _folder parameter allows a specially crafted, double URL-encoded payload to be reflected and executed in the context of an authenticated user s session.

EPSS

Процентиль: 3%
0.00138
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79