Back to Database
Status published
Unknown
CVE-2022-40361
Cross Site Scripting Vulnerability in Elite CRM v1.2.11 allows attacker...
Vulnerability Description
Cross Site Scripting Vulnerability in Elite CRM v1.2.11 allows attacker to execute arbitrary code via the language parameter to the /ngs/login endpoint.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-40361
Credits & Attribution
No credits recorded in the NVD database.
References
More from elitecms
View All →CVE-2022-30816
elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_sidebar.php....
Critical
9.8
CVE-2022-30815
elitecms 1.01 is vulnerable to SQL Injection via admin/edit_sidebar.php?page=2&sidebar=...
Critical
9.8
CVE-2022-30814
elitecms v1.01 is vulnerable to SQL Injection via /admin/add_sidebar.php....
Critical
9.8
CVE-2022-30813
elitecms 1.01 is vulnerable to SQL Injection via /admin/add_post.php....
Critical
9.8
CVE-2022-30810
elitecms v1.01 is vulnerable to SQL Injection via admin/edit_post.php....
Critical
9.8
Affected Vendor
elitecms
View all reports →Affected Software
elite cms
Vulnerable Versions:
1.2.11
Timeline
Official Publish:
January 11th, 2024
Last Modified:
June 17th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.