Medium severity5.4NVD Advisory· Published Apr 15, 2023· Updated Jun 17, 2026
CVE-2022-48177
CVE-2022-48177
Description
X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the adin/importModels Import Records Model field (model parameter). This vulnerability allows attackers to create malicious JavaScript that will be executed by the victim user's browser.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- X2CRM/Open Source Sales CRMdescription
Patches
Vulnerability mechanics
References
2- packetstormsecurity.com/files/171792/X2CRM-6.6-6.9-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry
- sourceforge.net/projects/x2engine/nvdProduct
News mentions
0No linked articles in our index yet.