← All advisories

Medium severity5.4NVD Advisory· Published Sep 27, 2022· Updated Jun 17, 2026

CVE-2022-38335

CVE-2022-38335

Description

Vtiger CRM v7.4.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the e-mail template modules.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Vtiger/Vtigercrm3 versions
cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*range: <=7.4.0
- (no CPE)
- (no CPE)range: =7.4.0
Vtiger/vTigerllm-fuzzy
Range: =7.4.0

Patches

Vulnerability mechanics

References

3

github.com/sbaresearch/advisories/tree/public/2022/SBA-ADV-20220328-01_Vtiger_CRM_Stored_Cross-Site_ScriptingnvdExploitThird Party Advisory
code.vtiger.com/vtiger/vtigercrmnvdVendor Advisory
www.vtiger.comnvdProduct

News mentions

0

No linked articles in our index yet.