The vulnerability exists in Vtiger CRM 8.4.0's Dashboard module where the tabid parameter in the DashBoardTab view does not properly sanitize user input. This flaw enables an attacker to inject arbitrary HTML into the dashboard interface, which is then rendered in the context of the victim's browser session. No CVSS score or detailed exploit information is available, and no patch or official remediation guidance has been published.

An attacker can inject arbitrary HTML content into the dashboard interface of Vtiger CRM 8.4.0. This could lead to user interface manipulation or potentially facilitate further attacks such as phishing or session hijacking if combined with other vulnerabilities. There is no evidence of known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation has been published, users should monitor vendor communications for updates. Until a fix is available, consider restricting access to the affected module or applying input validation controls if possible.