Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pwjp-74x6-hcx5

Опубликовано: 15 апр. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Create Action function, aka an index.php/actions/update URI.

X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Create Action function, aka an index.php/actions/update URI.

EPSS

Процентиль: 80%
0.0144
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
почти 3 года назад

X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Create Action function, aka an index.php/actions/update URI.

EPSS

Процентиль: 80%
0.0144
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79