Vulnerability Details CVE-2024-54687
Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting (XSS) via the Documents module and function uploadAndSaveFile in CRMEntity.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 1.4%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2024-54687
-
cpe:2.3:a:vtiger:vtiger_crm:1.0
-
cpe:2.3:a:vtiger:vtiger_crm:2.0
-
cpe:2.3:a:vtiger:vtiger_crm:2.0.1
-
cpe:2.3:a:vtiger:vtiger_crm:2.1
-
cpe:2.3:a:vtiger:vtiger_crm:3.0
-
cpe:2.3:a:vtiger:vtiger_crm:3.2
-
cpe:2.3:a:vtiger:vtiger_crm:4
-
cpe:2.3:a:vtiger:vtiger_crm:4.0
-
cpe:2.3:a:vtiger:vtiger_crm:4.0.1
-
cpe:2.3:a:vtiger:vtiger_crm:4.2
-
cpe:2.3:a:vtiger:vtiger_crm:4.2.4
-
cpe:2.3:a:vtiger:vtiger_crm:5
-
cpe:2.3:a:vtiger:vtiger_crm:5.0
-
cpe:2.3:a:vtiger:vtiger_crm:5.0.0
-
cpe:2.3:a:vtiger:vtiger_crm:5.0.1
-
cpe:2.3:a:vtiger:vtiger_crm:5.0.2
-
cpe:2.3:a:vtiger:vtiger_crm:5.0.3
-
cpe:2.3:a:vtiger:vtiger_crm:5.0.4
-
cpe:2.3:a:vtiger:vtiger_crm:5.1.0
-
cpe:2.3:a:vtiger:vtiger_crm:5.2.0
-
cpe:2.3:a:vtiger:vtiger_crm:5.2.1
-
cpe:2.3:a:vtiger:vtiger_crm:5.3.0
-
cpe:2.3:a:vtiger:vtiger_crm:5.4.0
-
cpe:2.3:a:vtiger:vtiger_crm:6.0
-
cpe:2.3:a:vtiger:vtiger_crm:6.0.0