Medium severity5.4NVD Advisory· Published Apr 15, 2023· Updated Jun 17, 2026

CVE-2022-48178

Description

X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Create Action function, aka an index.php/actions/update URI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

X2CRM/Open Source Sales CRMdescription

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/171792/X2CRM-6.6-6.9-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry
sourceforge.net/projects/x2engine/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000