Amocrm

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-28870 Mar 11, 21:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in amocrm amoCRM WebForm allows DOM-Based XSS. This issue affects amoCRM WebForm: from n/a through 1.1. [CVSS 6.5 MEDIUM]

WordPress XSS Wordpress Plugin Amocrm

NVD

CVSS 3.1

6.5

EPSS

0.1%

CVE-2015-7304 Sep 21, 19:59 LOW PATCH Monitor

Cross-site scripting (XSS) vulnerability in the amoCRM module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP POST data. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable.

XSS Amocrm

NVD

CVSS 2.0

2.6

EPSS

0.3%

CVE-2025-28870

EPSS 0% CVSS 6.5

MEDIUM This Month

WordPress XSS Wordpress Plugin +1

NVD

CVE-2015-7304

EPSS 0% CVSS 2.6

LOW PATCH Monitor

XSS Amocrm

NVD