3 matches found
CVE-2013-5693
Cross-site scripting XSS vulnerability in X2Engine X2CRM before 3.5 allows remote attackers to inject arbitrary web script or HTML via the model parameter to index.php/admin/editor...
PT-2013-5729
Name of the Vulnerable Software and Affected Versions X2Engine X2CRM versions prior to 3.5 Description The issue allows remote attackers to inject arbitrary web script or HTML via the model parameter to "index.php/admin/editor". This can lead to cross-site scripting XSS attacks. Recommendations F...
CVE-2013-5693: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in X2Engine X2CRM before 3.5 allows remote attackers to inject arbitrary web script or HTML via the model parameter to index.php/admin/editor...