Internet Web Solutions Sublime CRM Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in Internet Web Solutions Sublime CRM versions prior to 20250207. The issue arises in an unknown function within the file /crm/inicio.php, specifically related to the HTTP POST request handling. The vulnerability allows for remote exploitation by manipulating the msg_to argument, and potentially other parameters as well.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.