Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-48177
HistoryApr 15, 2023 - 1:15 a.m.

Cross site scripting

2023-04-1501:15:00
PRIOn knowledge base
www.prio-n.com
4
x2crm sales crm
xss vulnerability
javascript execution

0.001 Low

EPSS

Percentile

34.6%

X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the adin/importModels Import Records Model field (model parameter). This vulnerability allows attackers to create malicious JavaScript that will be executed by the victim user’s browser.

CPENameOperatorVersion
x2crmeq6.9
x2crmeq6.6

0.001 Low

EPSS

Percentile

34.6%

Related for PRION:CVE-2022-48177