Lucene search
China National Vulnerability DatabaseCNVD-2024-02988HistoryJan 16, 2024 - 12:00 a.m.
Elite CRM Cross-Site Scripting Vulnerability
2024-01-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
elite crm
cross-site scripting
vulnerability
filtering
arbitrary code
language parameter
cnvd
Elite CRM is a customer relationship management system. A cross-site scripting vulnerability exists in Elite CRM v1.2.11, which stems from the application’s lack of effective filtering and escaping of user-supplied data, and can be exploited by an attacker to execute arbitrary code via the language parameter of the /ngs/login endpoint.
| CPE | Name | Operator | Version |
|---|---|---|---|
| elite crm elite crm v | eq | 1.2.11 |
Related
nvd
nvd
CVE-2022-40361
2024-01-11 03:15:09
cve
cve
CVE-2022-40361
2024-01-11 03:15:09
prion
prion
Cross site scripting
2024-01-11 03:15:00
cvelist
cvelist
CVE-2022-40361
2024-01-11 00:00:00