Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-4754

Stored XSS in Next4Biz's BPM

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Next4Biz CRM & BPM Software Business Process Manangement (BPM) allows Stored XSS. This issue affects Business Process Manangement (BPM): from 6.6.4.4 before 6.6.4.5.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Next4Biz CRM & BPM Software Business Process Manangement (BPM)

Default version status: unaffected

  • 6.6.4.4 to < 6.6.4.5affected

References