X2engine vulnerabilities

Products

• X2crm 13
• X2engine 2

Newest

• x2engine x2crm X2CRM v8.5 is vulnerable to a stored Cross-Site Scripting (XSS) in the "Opportunities" module. An... CVE-2024-48120 Public exploit 5.4 MediumOctober 14, 2024
• x2engine x2crm X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting ... CVE-2022-48178 Public exploit 5.4 MediumApril 15, 2023
• x2engine x2crm X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a reflected cross-site... CVE-2022-48177 Public exploit 5.4 MediumApril 15, 2023
• x2engine x2crm A Cross-Site Scripting (XSS) attack can cause arbitrary code (javascript) to run in a user’s... CVE-2021-33853 5.4 MediumMarch 16, 2022
• x2engine x2crm Cross Site Scripting (XSS) in X2engine X2CRM v7.1 and older allows remote attackers to obtain... CVE-2020-21088 4.8 MediumApril 14, 2021
• x2engine x2crm Cross Site Scripting (XSS) in X2Engine X2CRM v6.9 and older allows remote attackers to execute... CVE-2020-21087 6.1 MediumApril 14, 2021
• x2engine x2crm Cross Site Scripting (XSS) in X2Engine X2CRM v7.1 allows remote attackers to obtain sensitive... CVE-2021-27288 6.1 MediumApril 14, 2021
• x2engine x2crm Unrestricted file upload vulnerability in the ProfileController::actionUploadPhoto method in... CVE-2014-2664 8.8 HighOctober 17, 2017
• x2engine x2crm Multiple cross-site scripting (XSS) vulnerabilities in X2Engine X2CRM before 5.0.9 allow remote... CVE-2015-5076 4.3 MediumSeptember 29, 2015
• x2engine x2crm Cross-site request forgery (CSRF) vulnerability in X2Engine X2CRM before 5.2 allows remote... CVE-2015-5075 Public exploit 6.8 MediumSeptember 29, 2015
• x2engine x2crm Incomplete blacklist vulnerability in the FileUploadsFilter class in protected/components/filters... CVE-2015-5074 Public exploit 7.5 HighSeptember 29, 2015
• x2engine FileUploadsFilter.php in X2Engine 4.1.7 and earlier, when running on case-insensitive file... CVE-2014-5298 5.0 MediumOctober 10, 2014
• x2engine The actionSendErrorReport method in protected/controllers/SiteController.php in X2Engine 2.8... CVE-2014-5297 7.5 HighOctober 10, 2014
• x2engine x2crm Cross-site scripting (XSS) vulnerability in X2Engine X2CRM before 3.5 allows remote attackers to... CVE-2013-5693 Public exploit 4.3 MediumSeptember 30, 2013
• x2engine x2crm Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated... CVE-2013-5692 Public exploit 8.5 HighSeptember 30, 2013