A vulnerability, which was classified as problematic, has been found in CodeCanyon CRMGo SaaS up to 7.2. This issue affects some unknown processing of the file /project/task/{task_id}/show. The manipulation of the argument comment leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?id.278201 | Third Party Advisory |
| https://vuldb.com/?ctiid.278201 | Permissions Required |
| https://vuldb.com/?submit.410565 | Third Party Advisory |
| https://bytium.com/stored-xss-vulnerabilities-in-crmgo-sass-version-7-2/ | Third Party Advisory |
Configurations
History
25 Sep 2024, 16:52
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Workdo crmgo Saas
Workdo |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
| CPE | cpe:2.3:a:workdo:crmgo_saas:*:*:*:*:*:*:*:* | |
| References | () https://vuldb.com/?ctiid.278201 - Permissions Required | |
| References | () https://bytium.com/stored-xss-vulnerabilities-in-crmgo-sass-version-7-2/ - Third Party Advisory | |
| References | () https://vuldb.com/?submit.410565 - Third Party Advisory | |
| References | () https://vuldb.com/?id.278201 - Third Party Advisory |
20 Sep 2024, 12:30
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-09-20 12:15
Updated : 2024-09-25 16:52
NVD link : CVE-2024-9031
Mitre link : CVE-2024-9031
JSON object : View
Products Affected
workdo
- crmgo_saas
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')