← Database

CVE-2022-40361

MEDIUM CVSS: 6.1 Published: 2024-01-11 Modified: 2026-06-17

Description

Cross Site Scripting Vulnerability in Elite CRM v1.2.11 allows attacker to execute arbitrary code via the language parameter to the /ngs/login endpoint.

Affected Platforms

Elitecms Elite Cms

Weakness Type

CWE-79, CWE-79

References