CVE-2022-38335

Vtiger CRM v7.4.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the e-mail template modules...

CVE-2022-38335

creationtimestamp| type| source ---|---|--- 2022-09-28 02:36:19+00:00| seen| https://t.me/cibsecurity/50538...

CVE-2022-38335

Vtiger CRM v7.4.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the e-mail template modules...

CVE-2022-38335

Vtiger CRM v7.4.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the e-mail template modules...

CVE-2022-38335

CVE-2022-38335 affects Vtiger CRM v7.4.0 with a stored XSS vulnerability in the Email Templates module. The root cause is insufficient input filtering/escaping in the module, allowing attacker-supplied data to be stored and later executed in the context of the affected user. The CVSS v3.1 base sc...