A cross-site scripting (XSS) vulnerability in the messages module of vtecrm vtenext 19 CE allows attackers to inject arbitrary JavaScript code via the From field of an...
6.1CVSS
5.9AI Score
0.005EPSS
A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code...
8.8CVSS
8.8AI Score
0.015EPSS
A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, adding users, and deleting...
8.8CVSS
8.6AI Score
0.008EPSS