medium6.1
CVE-2020-10227
A cross-site scripting (XSS) vulnerability in the messages module of vtecrm vtenext 19 CE allows attackers to inject arbitrary JavaScript code via the From fie…
Impact
A cross-site scripting (XSS) vulnerability in the messages module of vtecrm vtenext 19 CE allows attackers to inject arbitrary JavaScript code via the From field of an email.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vtenext | Vtenext | Version 19 |