CVE-2022-40361

2024-01-1100:00:00

mitre

www.cve.org

cross site scripting

elite crm

arbitrary code execution

/ngs/login endpoint

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

19.8%

JSON

Cross Site Scripting Vulnerability in Elite CRM v1.2.11 allows attacker to execute arbitrary code via the language parameter to the /ngs/login endpoint.

References

elitecrm.co/

hazemhussien99.wordpress.com/2024/01/07/cve-2022-40361-disclosure/