← Database

CVE-2022-48177

MEDIUM CVSS: 5.4 Published: 2023-04-15 Modified: 2026-06-17

Description

X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the adin/importModels Import Records Model field (model parameter). This vulnerability allows attackers to create malicious JavaScript that will be executed by the victim user's browser.

Affected Platforms

X2Engine X2Crm

Weakness Type

CWE-79, CWE-79

References