Read the docs

amocrm

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

amocrm records in CISA KEV

No amocrm vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Amocrm 1 record LOW

Records

1 record in Amocrm · all components

TI-2025-20813 CVE-2025-28870 · GHSA-9vmp-4f49-fr63

WordPress amoCRM WebForm plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in amocrm amoCRM WebForm amocrm-webform allows DOM-Based XSS.This issue affects amoCRM WebForm: from n/a through <= 1.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00273 Published 2025-03-11 No fix listed CWE-79
Open these records in search →