EUVD-2022-50889

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

X2CRM Sales CRM versions 6.6 and 6.9 have a stored XSS vulnerability in the Create Action function.

Reporter	Title	Published	Views	Family All 12
0day.today	X2CRM v6.6/6.9 - Stored Cross-Site Scripting (Authenticated) Vulnerability	8 Apr 202300:00	–	zdt
Circl	CVE-2022-48178	15 Apr 202307:26	–	circl
CNNVD	X2Engine X2CRM 跨站脚本漏洞	8 Apr 202300:00	–	cnnvd
CVE	CVE-2022-48178	15 Apr 202300:00	–	cve
Cvelist	CVE-2022-48178	15 Apr 202300:00	–	cvelist
Exploit DB	X2CRM v6.6/6.9 - Stored Cross-Site Scripting (XSS) (Authenticated)	8 Apr 202300:00	–	exploitdb
NVD	CVE-2022-48178	15 Apr 202301:15	–	nvd
Packet Storm	X2CRM 6.6 / 6.9 Cross Site Scripting	10 Apr 202300:00	–	packetstorm
Prion	Cross site scripting	15 Apr 202301:15	–	prion
Positive Technologies	PT-2023-15603	15 Apr 202300:00	–	ptsecurity

[
  {
    "enisaIdVendor": [
      {
        "id": "4fe6aa35-8b10-38e8-a6cb-0d5942822081",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "dda85f3d-be39-3a8e-ab84-945384d5b357",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
sourceforge	www.sourceforge.net/projects/x2engine/
packetstormsecurity	www.packetstormsecurity.com/files/171792/X2CRM-6.6-6.9-Cross-Site-Scripting.html

03 Oct 2025 20:07Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.15.4

EPSS0.01915

SSVC