EXPOSURES › CVE-2024-44778
CVE-2024-44778
CRITICAL
DETAIL
SourceNVD · cve
Published2024-08-29
CVSS9.6
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2024-44778 ↗
⚡ RCE
◐ ZERO-DAY
SHAME 50/100
rcezero-day
A reflected cross-site scripting (XSS) vulnerability in the parent parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
PLAYERS IMPLICATED
DESCRIPTION
A reflected cross-site scripting (XSS) vulnerability in the parent parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.