CVE-2020-10227

6.1 mediumEPSS 1.1%

Medium (6.1) in vtenext vtenext. EPSS 1.1% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability in the messages module of vtecrm vtenext 19 CE allows attackers to inject arbitrary JavaScript code via the From field of an email.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-09-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vtenext:vtenext

References

https://sourceforge.net/projects/vtecrm/
https://vtenext.com/en/
https://www.exploit-db.com/exploits/48804
https://sourceforge.net/projects/vtecrm/
https://vtenext.com/en/

Check your stack JSON