Lucene search

K

Vtenext Security Vulnerabilities

cve
cve

CVE-2020-10227

A cross-site scripting (XSS) vulnerability in the messages module of vtecrm vtenext 19 CE allows attackers to inject arbitrary JavaScript code via the From field of an...

6.1CVSS

5.9AI Score

0.005EPSS

2020-09-14 08:15 PM
46
cve
cve

CVE-2020-10228

A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code...

8.8CVSS

8.8AI Score

0.015EPSS

2020-09-14 08:15 PM
47
cve
cve

CVE-2020-10229

A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, adding users, and deleting...

8.8CVSS

8.6AI Score

0.008EPSS

2020-09-14 08:15 PM
42