| Package | Affected versions | Patched versions |
|---|---|---|
| daybyday | ≥ 1.1, ≤ 2.2.1 |
In DayByDay CRM, versions 1.1 through 2.2.1 (latest) suffer from an application-wide Client-Side Template Injection (CSTI). A low privileged attacker can input template injection payloads in the application at various locations to execute JavaScript on the client browser.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free