Unrated severityNVD Advisory· Published Jan 25, 2023· Updated Apr 1, 2025

CVE-2022-47073

Description

A cross-site scripting (XSS) vulnerability in the Create Ticket page of Small CRM v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Subject parameter.

Affected products

Small CRM/Small CRMdescription
Phpgurukul/Small CRMllm-fuzzy
Range: =3.0

Patches

Vulnerability mechanics

References

medium.com/%40shiva.infocop/stored-xss-found-in-small-crm-phpgurukul-7890ea3c04dfmitre
packetstormsecurity.commitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000