CVE-2025-70936Disclosure

LOWCVSS 5.4 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Vtiger CRM 8.4.0 contains a reflected cross-site scripting (XSS) vulnerability in the MailManager module. Improper handling of user-controlled input in the _folder parameter allows a specially crafted, double URL-encoded payload to be reflected and executed in the context of an authenticated user s session.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-04-14); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets3 URLs

By indicator

Full discourse2 posts

Vulmon Vulnerability Feed@VulmonFeeds177d
Disclosure
CVE-2025-70936 Reflected XSS in Vtiger CRM 8.4.0 MailManager Module via Folder P... https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-70936 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The tweet announces CVE-2025-70936 as a reflected XSS issue in Vtiger CRM 8.4.0, linking to a vulnerability details page but providing no evidence of exploitation or remediation.
0101194
4.0K followersView on X
CVE@CVEnew172d
Disclosure
CVE-2025-70936 Vtiger CRM 8.4.0 contains a reflected cross-site scripting (XSS) vulnerability in the MailManager module. Improper handling of user-controlled input in the _folder pa… https://www.cve.org/CVERecord?id=CVE-2025-70936
Post summary
The CVE-2025-70936 is a reflected XSS vulnerability in Vtiger CRM 8.4.0’s MailManager module caused by improper handling of user input in the _folder parameter.
00000225
57.2K followersView on X

Explore more

Back to dashboard