CVE-2022-48178

Опубликовано: 15 апр. 2023

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Create Action function, aka an index.php/actions/update URI.

Ссылки

http://packetstormsecurity.com/files/171792/X2CRM-6.6-6.9-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://sourceforge.net/projects/x2engine/
Product
http://packetstormsecurity.com/files/171792/X2CRM-6.6-6.9-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://sourceforge.net/projects/x2engine/
Product

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:x2engine:x2crm:6.6:*:*:*:*:*:*:*

cpe:2.3:a:x2engine:x2crm:6.9:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.0144

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-pwjp-74x6-hcx5