medium5.4
CVE-2022-38335
Vtiger CRM v7.4.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the e-mail template modules.
Impact
Vtiger CRM v7.4.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the e-mail template modules.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vtiger | Vtiger Crm | through 7.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://code.vtiger.com/vtiger/vtigercrm
- https://github.com/sbaresearch/advisories/tree/public/2022/SBA-ADV-20220328-01_Vtiger_CRM_Stored_Cross-Site_Scripting
- https://www.vtiger.com/
- https://code.vtiger.com/vtiger/vtigercrm
- https://github.com/sbaresearch/advisories/tree/public/2022/SBA-ADV-20220328-01_Vtiger_CRM_Stored_Cross-Site_Scripting
- https://www.vtiger.com/