Количество 2
Количество 2
CVE-2022-22109
In Daybyday CRM, version 2.2.0 is vulnerable to Stored Cross-Site Scripting (XSS) vulnerability that allows low privileged application users to store malicious scripts in the title field of new tasks. These scripts are executed in a victim’s browser when they open the “/tasks” page to view all the tasks.
GHSA-jr37-66pj-36v7
Cross-site Scripting in DayByDay CRM
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-22109 In Daybyday CRM, version 2.2.0 is vulnerable to Stored Cross-Site Scripting (XSS) vulnerability that allows low privileged application users to store malicious scripts in the title field of new tasks. These scripts are executed in a victim’s browser when they open the “/tasks” page to view all the tasks. | CVSS3: 5.4 | 0% Низкий | около 4 лет назад |
| GHSA-jr37-66pj-36v7 Cross-site Scripting in DayByDay CRM | CVSS3: 5.4 | 0% Низкий | около 4 лет назад |
Уязвимостей на страницу