GCVE - cpe:2.3:a:vtiger:vtiger_crm:7.4.0:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:vtiger:vtiger_crm:7.4.0:-:*:*:*:*:*:*

part: a version: 7.4.0 update: -

Vendor	Vtiger (`89c2c1fd-beb5-5812-adce-99178d2f98e1`)
Product	Vtiger Crm (`db56b9a5-457e-50d1-9abc-804932f49ea0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/vtiger-crm/vtigercrm`	purl2cpe	2026-06-01 10:15:56.223901
`pkg:sourceforge/vtigercrm`	purl2cpe	2026-06-01 10:15:56.223902

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-44779`	vulnerable	2026-06-08 06:45:54.178983	Details available A reflected cross-site scripting (XSS) vulnerability in the viewname parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload. Published: 2024-08-29T00:00:00.000Z Updated: 2026-07-05T00:43:57.189Z Open on db.gcve.eu Reference links https://packetstormsecurity.com/files/180462/vTiger-CRM-7.4.0-Cross-Site-Scripting.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-44778`	vulnerable	2026-06-08 06:45:54.178436	Details available A reflected cross-site scripting (XSS) vulnerability in the parent parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload. Published: 2024-08-29T00:00:00.000Z Updated: 2026-07-05T00:43:53.072Z Open on db.gcve.eu Reference links https://packetstormsecurity.com/files/180462/vTiger-CRM-7.4.0-Cross-Site-Scripting.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-44777`	vulnerable	2026-06-08 06:45:54.177911	Details available A reflected cross-site scripting (XSS) vulnerability in the tag parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload. Published: 2024-08-29T00:00:00.000Z Updated: 2026-07-05T00:43:48.666Z Open on db.gcve.eu Reference links https://packetstormsecurity.com/files/180462/vTiger-CRM-7.4.0-Cross-Site-Scripting.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-44776`	vulnerable	2026-06-08 06:45:54.177262	Details available An Open Redirect vulnerability in the page parameter of vTiger CRM v7.4.0 allows attackers to redirect users to a malicious site via a crafted URL. Published: 2024-08-29T00:00:00.000Z Updated: 2026-07-05T00:43:44.787Z Open on db.gcve.eu Reference links https://packetstormsecurity.com/files/180461/vTiger-CRM-7.4.0-Open-Redirection.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.