Skip to content
OpenAdvisories

Vendor

Apptivo

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 4.3

    Apptivo Business Site CRM <= 5.3 - Cross-Site Request Forgery to IP Address Block

    The Apptivo Business Site CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.3. This is due to missing or incorrect nonce validation on the 'awp_ip_deny' page. This makes it possible for unauthenticate…

  • Medium 4.8

    WordPress Apptivo Business Site CRM Plugin <= 3.0.12 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Apptivo Apptivo Business Site CRM plugin <= 3.0.12 versions.