VYPR
Medium severity6.1NVD Advisory· Published Jan 20, 2021· Updated Jun 17, 2026

CVE-2020-19362

CVE-2020-19362

Description

Reflected XSS in Vtiger CRM v7.2.0 in vtigercrm/index.php? through the view parameter can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page.

Affected products

3
  • cpe:2.3:a:vtiger:vtiger_crm:7.2.0:*:*:*:*:*:*:*
  • Vtiger CRM/Vtiger CRMdescription
  • Vtiger/CRMllm-fuzzy
    Range: v7.2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.