776 matches found
WordPress WP VTiger Synchronization plugin <= 1.1.1 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin WP VTiger Synchronization versions = 1.1.1...
WordPress plugin WP VTiger Synchronization 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...
CVE-2025-23455: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Master Software Solutions WP VTiger Synchronization msstiger allows Stored XSS.This issue affects WP VTiger Synchronization: from n/a through = 1.1.1...
CVE-2024-54687
Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting XSS via the Documents module and function uploadAndSaveFile in CRMEntity.php...
CVE-2024-54687
Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting XSS via the Documents module and function uploadAndSaveFile in CRMEntity.php...
CVE-2024-54687
Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting XSS via the Documents module and function uploadAndSaveFile in CRMEntity.php...
CVE-2024-54687
Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting XSS via the Documents module and function uploadAndSaveFile in CRMEntity.php...
CVE-2024-54687: Improper Neutralization of Input During Web Page Generation
Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting XSS via the Documents module and function uploadAndSaveFile in CRMEntity.php...
Vtiger CRM 安全漏洞
Vtiger CRM is a customer relationship management system CRM developed based on SugarCRM by Vtiger USA. The management system provides functions such as managing, collecting, and analyzing customer information. A security vulnerability exists in Vtiger CRM v.6.1 and earlier versions, which stems...
CVE-2024-54687
Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting XSS via the Documents module and function uploadAndSaveFile in CRMEntity.php...
PT-2025-3062
Name of the Vulnerable Software and Affected Versions Vtiger CRM versions 6.1 and earlier Description The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via the Documents module and the function uploadAndSaveFile in CRMEntity.php. Recommendations For versions 6.1 and...
CVE-2024-54687
Vtiger CRM versions 6.1 and earlier are vulnerable to a Cross-Site Scripting (XSS) vulnerability. The flaw exists within the Documents module , specifically in the uploadAndSaveFile function located in CRMEntity.php. This vulnerability allows for the execution of malicious scripts in the context ...
CVE-2024-48119
Vtiger CRM v8.2.0 has a HTML Injection vulnerability in the module parameter. Authenticated users can inject arbitrary HTML...
CVE-2024-48119
Vtiger CRM v8.2.0 has a HTML Injection vulnerability in the module parameter. Authenticated users can inject arbitrary HTML...
CVE-2024-48119
Vtiger CRM v8.2.0 has a HTML Injection vulnerability in the module parameter. Authenticated users can inject arbitrary HTML...
CVE-2024-48119: Improper Neutralization of Input During Web Page Generation
Vtiger CRM v8.2.0 has a HTML Injection vulnerability in the module parameter. Authenticated users can inject arbitrary HTML...
PT-2024-32993 · Vtiger · Vtiger Crm
Name of the Vulnerable Software and Affected Versions: Vtiger CRM version 8.2.0 Description: The issue is related to a HTML Injection vulnerability in the module parameter. This allows authenticated users to inject arbitrary HTML. Recommendations: For Vtiger CRM version 8.2.0, consider restrictin...
Vtiger CRM 安全漏洞
Vtiger CRM is a customer relationship management system CRM developed based on SugarCRM by Vtiger USA. The management system provides functions such as managing, collecting, and analyzing customer information. A security vulnerability exists in Vtiger CRM version v8.2.0. An attacker can exploit t...
CVE-2024-48119
Vtiger CRM v8.2.0 is affected by a HTML Injection vulnerability in the module parameter. Authenticated users can inject arbitrary HTML. The CVSSv3.1 base score is 5.4 (MEDIUM), with Low impact on confidentiality and integrity and no impact on availability. Exploitation details beyond the authenti...