CVE-2022-48177 - CVE House
Back to Database
Status published Unknown CVE-2022-48177

X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered...

Vulnerability Description

X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the adin/importModels Import Records Model field (model parameter). This vulnerability allows attackers to create malicious JavaScript that will be executed by the victim user's browser.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-48177

Credits & Attribution

No credits recorded in the NVD database.

References

More from x2engine

View All →
CVE-2022-48178
X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered...
Unknown 0
CVE-2021-27288
Cross Site Scripting (XSS) in X2Engine X2CRM v7.1 allows remote...
Medium 6.1
CVE-2020-21088
Cross Site Scripting (XSS) in X2engine X2CRM v7.1 and older...
Medium 4.8
CVE-2020-21087
Cross Site Scripting (XSS) in X2Engine X2CRM v6.9 and older...
Medium 6.1
CVE-2015-5076
Multiple cross-site scripting (XSS) vulnerabilities in X2Engine X2CRM before 5.0.9...
Medium 4.3

Affected Vendor

Affected Software

x2crm
Vulnerable Versions:
6.6, 6.9

Timeline

Official Publish: April 15th, 2023
Last Modified: February 6th, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.