CVE-2024-44779

Critical · CVSS 9.6

vTiger CRM — Reflected Cross-Site Scripting (XSS)

CVSS: 9.6; nvd
EPSS: —
KEV: No
Class: other; CWE-79, CWE-79

Description

A reflected cross-site scripting (XSS) vulnerability in the viewname parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.

Search profile — drives PoC discovery

Symbols viewnameindexindex.phpviewname parametercrafted payload

Keywords CVE-2024-44779vTiger CRMvTiger CRM 7.4.0XSSreflected XSSviewnamecross-site scriptingvTiger index pagevTiger CRM exploitvTiger CRM PoC

Versions: 7.4.0

References

https://packetstormsecurity.com/files/180462/vTiger-CRM-7.4.0-Cross-Site-Scripting.html

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-06T00:30:39.000Z