CVE-2025-1618

Name of the Vulnerable Software and Affected Versions vTiger CRM version 6.4.0

Description A problematic issue has been identified, affecting the /modules/Mobile/index.php file. The manipulation of the operation argument leads to cross-site scripting. This issue can be exploited remotely.

Recommendations For version 6.4.0, as a temporary workaround, consider restricting access to the /modules/Mobile/index.php file until a patch is available. Avoid manipulating the operation argument in the affected file to minimize the risk of exploitation.