PatchTheCVEsmall crm project vulnerabilities
Recent CVEs affecting small crm project products. 5 tracked.
small crm project has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-12-29. Highest priority: CVE-2023-50035 (score 57/100).
- CVE-2023-50035 CRITICAL 9.8 DOWNGRADE PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" paramet
- CVE-2023-45394 MEDIUM 5.4 DOWNGRADE Stored Cross-Site Scripting (XSS) vulnerability in the Company field in the "Request a Quote" Section of Small
- CVE-2023-44075 MEDIUM 5.4 DOWNGRADE Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote attacker to execute arbitrary cod
- CVE-2023-43331 MEDIUM 5.4 DOWNGRADE A cross-site scripting (XSS) vulnerability in the Add User function of Small CRM v3.0 allows attackers to exec
- CVE-2023-34650 MEDIUM 6.1 DOWNGRADE PHPgurukl Small CRM v.1.0 is vulnerable to Cross Site Scripting (XSS).
FAQ
How do I fix small crm project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is small crm project being exploited right now?
None of the tracked small crm project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which small crm project CVE should I patch first?
CVE-2023-50035 currently ranks highest (57/100): PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" paramet.