Skip to content
X2engine X2crm vulnerabilities
-
x2engine x2crm
X2CRM v8.5 is vulnerable to a stored Cross-Site Scripting (XSS) in the "Opportunities" module. An...
CVE-2024-48120
Public exploit
5.4 Medium
-
x2engine x2crm
X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting ...
CVE-2022-48178
Public exploit
5.4 Medium
-
x2engine x2crm
X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a reflected cross-site...
CVE-2022-48177
Public exploit
5.4 Medium
-
x2engine x2crm
A Cross-Site Scripting (XSS) attack can cause arbitrary code (javascript) to run in a user’s...
CVE-2021-33853
5.4 Medium
-
x2engine x2crm
Cross Site Scripting (XSS) in X2engine X2CRM v7.1 and older allows remote attackers to obtain...
CVE-2020-21088
4.8 Medium
-
x2engine x2crm
Cross Site Scripting (XSS) in X2Engine X2CRM v6.9 and older allows remote attackers to execute...
CVE-2020-21087
6.1 Medium
-
x2engine x2crm
Cross Site Scripting (XSS) in X2Engine X2CRM v7.1 allows remote attackers to obtain sensitive...
CVE-2021-27288
6.1 Medium
-
x2engine x2crm
Unrestricted file upload vulnerability in the ProfileController::actionUploadPhoto method in...
CVE-2014-2664
8.8 High
-
x2engine x2crm
Multiple cross-site scripting (XSS) vulnerabilities in X2Engine X2CRM before 5.0.9 allow remote...
CVE-2015-5076
4.3 Medium
-
x2engine x2crm
Cross-site request forgery (CSRF) vulnerability in X2Engine X2CRM before 5.2 allows remote...
CVE-2015-5075
Public exploit
6.8 Medium
-
x2engine x2crm
Incomplete blacklist vulnerability in the FileUploadsFilter class in protected/components/filters...
CVE-2015-5074
Public exploit
7.5 High
-
x2engine x2crm
Cross-site scripting (XSS) vulnerability in X2Engine X2CRM before 3.5 allows remote attackers to...
CVE-2013-5693
Public exploit
4.3 Medium
-
x2engine x2crm
Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated...
CVE-2013-5692
Public exploit
8.5 High