CVE-2024-4754

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Next4Biz CRM & BPM Software Business Process Manangement BPM allows Stored XSS. This issue affects Business Process Manangement BPM: from 6.6.4.4 before 6.6.4.5...

CVE-2024-4754

CVE-2024-4754 describes a stored cross-site scripting vulnerability in Next4Biz CRM & BPM Software (Business Process Management). The issue arises from improper neutralization of input during web page generation, affecting BPM versions 6.6.4.4 and earlier, with a fix in 6.6.4.5. The CVE entry con...

CVE-2024-5683 Remote Code Execution in Next4Biz's BPM

Improper Control of Generation of Code 'Code Injection' vulnerability in Next4Biz CRM & BPM Software Business Process Manangement BPM allows Remote Code Inclusion. This issue affects Business Process Manangement BPM: from 6.6.4.4 before 6.6.4.5...

Next4Biz Code Injection Vulnerability

Next4Biz is a marketing and sales management software from Next4Biz, Inc. A code injection vulnerability exists in Next4Biz versions 6.6.4.4 through prior to 6.6.4.5 that stems from improper code generation controls...

Next4Biz Cross-Site Scripting Vulnerability

Next4Biz is a marketing and sales management software from Next4Biz, Inc. A cross-site scripting vulnerability exists in Next4Biz versions 6.6.4.4 through prior to 6.6.4.5, which stems from improper neutralization of input during web page generation...