Filtered by vendor Vtenext Subscriptions
Filtered by product Vtenext Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-10229 1 Vtenext 1 Vtenext 2024-08-04 8.8 High
A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, adding users, and deleting accounts.
CVE-2020-10228 1 Vtenext 1 Vtenext 2024-08-04 8.8 High
A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code execution.
CVE-2020-10227 1 Vtenext 1 Vtenext 2024-08-04 6.1 Medium
A cross-site scripting (XSS) vulnerability in the messages module of vtecrm vtenext 19 CE allows attackers to inject arbitrary JavaScript code via the From field of an email.