Medium severity5.4NVD Advisory· Published Oct 14, 2024· Updated Jun 17, 2026
CVE-2024-48120
CVE-2024-48120
Description
X2CRM v8.5 is vulnerable to a stored Cross-Site Scripting (XSS) in the "Opportunities" module. An attacker can inject malicious JavaScript code into the "Name" field when creating a list.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- X2CRM/X2CRMdescription
Patches
Vulnerability mechanics
References
1- okankurtulus.com.tr/2024/09/12/x2crm-v8-5-stored-cross-site-scripting-xss-authenticated/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.