Description (CNA)
Reflected XSS in Vtiger CRM v7.2.0 in vtigercrm/index.php? through the view parameter can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/EmreOvunc/Vtiger-CRM-Vulnerabilities/
- https://emreovunc.com/blog/en/vtiger_crm_xss_03.png
ADP enrichment
No English description supplied.