5.0.4

DATE	CVE	VULNERABILITY TITLE	RISK
2021-04-14	CVE-2020-21088	Cross-site Scripting vulnerability in X2Engine X2Crm Cross Site Scripting (XSS) in X2engine X2CRM v7.1 and older allows remote attackers to obtain sensitive information by injecting arbitrary web script or HTML via the "First Name" and "Last Name" fields in "/index.php/contacts/create page" network low complexity x2engine CWE-79	4.8
2021-04-14	CVE-2020-21087	Cross-site Scripting vulnerability in X2Engine X2Crm Cross Site Scripting (XSS) in X2Engine X2CRM v6.9 and older allows remote attackers to execute arbitrary code by injecting arbitrary web script or HTML via the "New Name" field of the "Rename a Module" tool. network low complexity x2engine CWE-79	6.1