CVE-2011-4680

vtiger CRM < 5.2.0 - Cross-Site Scripting in Customer Portal

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in the customer portal in vtiger CRM before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
http://wiki.vtiger.com/index.php/Jan2011:ODUpdate

Scores

EPSS 0.0093
EPSS Percentile 56.8%

Details

CWE
CWE-79
Status published
Products (19)
vtiger/vtiger_crm 1.0
vtiger/vtiger_crm 2.0
vtiger/vtiger_crm 2.0.1
vtiger/vtiger_crm 2.1
vtiger/vtiger_crm 3
vtiger/vtiger_crm 3.0 (2 CPE variants)
vtiger/vtiger_crm 3.2
vtiger/vtiger_crm 4 (4 CPE variants)
vtiger/vtiger_crm 4.0
vtiger/vtiger_crm 4.0.1
... and 9 more
Published Dec 07, 2011
Tracked Since Feb 18, 2026