CVE-2011-4680

Vtiger Crm < 5.1.0 - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in the customer portal in vtiger CRM before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (1)

[Vendor Advisory] http://wiki.vtiger.com/index.php/Jan2011:ODUpdate

Scores

EPSS 0.0026

EPSS Percentile 49.4%

Classification

CWE

CWE-79

Status published

Affected Products (27)

vtiger/vtiger_crm < 5.1.0

vtiger/vtiger_crm

... and 12 more

Timeline

Published Dec 07, 2011

Tracked Since Feb 18, 2026