CVE-2020-19362: Vtiger CRM

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Reflected XSS in Vtiger CRM v7.2.0 in vtigercrm/index.php? through the view parameter can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page.

Affected products

• Vtiger Vtiger CRM: version 7.2.0 only

Published 2021-01-20. Last modified 2026-06-17.