Vulnerability in N/a

CVE-2026-26460

A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0. The application fails to properly neutralize user-supplied input in the tabid parameter of the DashBoardTab view (getTabContents action), allowing an attack…

EPSS: 0.000 (10.4th percentile) — read the EPSS interpretation.

Affected products

  • N/a — versions n/a

References