Cross site scripting

2011-12-0719:55:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the customer portal in vtiger CRM before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
vtiger_crmeq3
vtiger_crmeq5.0.3
vtiger_crmeq4.2 patch1
vtiger_crmeq2.0.1
vtiger_crmeq2.0
vtiger_crmeq4.2
vtiger_crmeq4.2 validation
vtiger_crmeq5.0.4
vtiger_crmeq2.1
vtiger_crmeq5.1.0 rc

Name	Operator	Version
vtiger_crm	eq	3
vtiger_crm	eq	5.0.3
vtiger_crm	eq	4.2 patch1
vtiger_crm	eq	2.0.1
vtiger_crm	eq	2.0
vtiger_crm	eq	4.2
vtiger_crm	eq	4.2 validation
vtiger_crm	eq	5.0.4
vtiger_crm	eq	2.1
vtiger_crm	eq	5.1.0 rc

Rows per page:

1-10 of 261

References

wiki.vtiger.com/index.php/Jan2011:ODUpdate