Skip to content
OpenAdvisories

Vendor

alexacrm

5 known vulnerabilities.

Products

Dynamics 365 Integration 4 Dataverse Integration 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2024-12583 Public exploit

    Dynamics 365 Integration <= 1.3.23 - Authenticated (Contributor+) Remote Code Execution and Arbitrary File Read via Twig Server-Side Template Injection

    The Dynamics 365 Integration plugin for WordPress is vulnerable to Remote Code Execution and Arbitrary File Read in all versions up to, and including, 1.3.23 via Twig Server-Side Template Injection. This is due to missing input validation and sanitization on …

    alexacrm Dynamics 365 Integration Web / CMS