Beveiligingsadvies

CVE-2022-48177

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-04-15 00:00:00
Laatst bijgewerkt 2025-02-06 15:51:33
Toegewezen door mitre
CVSS-score 5.4
Status PUBLISHED

Beschrijving

X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the adin/importModels Import Records Model field (model parameter). This vulnerability allows attackers to create malicious JavaScript that will be executed by the victim user's browser.