CVE-2024-44851: XSS

Published Sep 11, 2024

Updated

A stored cross-site scripting (XSS) vulnerability in the Discussion section of Perfex CRM v1.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Content parameter.

Affected Software

1 affected component

Perfexcrm Perfex Crm=1.1.0

Event History

Sep 11, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-44851?

CVE-2024-44851 is classified as a medium severity vulnerability due to its potential for remote code execution via cross-site scripting.

How do I fix CVE-2024-44851?

To fix CVE-2024-44851, update Perfex CRM to the latest version that addresses this vulnerability.

What is the impact of CVE-2024-44851?

CVE-2024-44851 allows attackers to execute arbitrary web scripts or HTML through the Discussion section, compromising user data and functionality.

Which version of Perfex CRM is affected by CVE-2024-44851?

CVE-2024-44851 specifically affects Perfex CRM version 1.1.0.

Is there a workaround for CVE-2024-44851?

Currently, the best mitigation for CVE-2024-44851 is to upgrade to a non-vulnerable version of Perfex CRM.