Record summary

CVE-2020-10227 has a selected CVSS score of 6.1 (medium); EIP currently links 1 catalogued exploit.

Description

A cross-site scripting (XSS) vulnerability in the messages module of vtecrm vtenext 19 CE allows attackers to inject arbitrary JavaScript code via the From field of an email.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBVTENEXT 19 CE - Remote Code ExecutionExploitDB exploitby Marco RuelaNot analyzed1 file

linked to 3 vulnerabilities

ExploitDB

PoC details

References

4