medium5.4Public exploit code
CVE-2022-48178
X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Create Action function, aka an inde…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- X2CRM v6.6/6.9 - Stored Cross-Site Scripting (XSS) (Authenticated)2023-04-08 · webapps · php
Impact
X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Create Action function, aka an index.php/actions/update URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| X2engine | X2crm | Versions 6.6, 6.9 |