CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2021/04/14 2:15 p.m.•23 views

CVE-2020-21088

Cross Site Scripting XSS in X2engine X2CRM v7.1 and older allows remote attackers to obtain sensitive information by injecting arbitrary web script or HTML via the "First Name" and "Last Name" fields in "/index.php/contacts/create page"...

4.8CVSS0.0076EPSS

Exploits1References2

OSV•added 2021/04/14 2:15 p.m.•13 views

CVE-2020-21088

4.8CVSS5.7AI score

Exploits0References2

CVE•added 2021/04/14 1:49 p.m.•42 views

CVE-2020-21088

X2engine/X2CRM 7.1 and earlier are affected by a Cross-Site Scripting (XSS) vulnerability that allows remote attackers to obtain sensitive information by injecting arbitrary script/HTML through the First Name and Last Name fields on the /index.php/contacts/create page. Root cause is untrusted inp...

4.8CVSS4.9AI score0.0076EPSS

Exploits1References2Affected Software1