YetiForce CRM vulnerable to stored Cross-site Scripting

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-3002 · ADVISORY
• yetiforcecompany/yetiforcecrm commit 54728be · WEB
• yetiforcecompany/yetiforcecrm · PACKAGE
• huntr.dev/bounties/d213d7ea-fe92-40b2-a1f9-2ba32dec50f5 · WEB

Lỗ hổng khác của yetiforce/yetiforce-crm

• CVE-2023-49508TRUNG BÌNH 6.5Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtai…
• CVE-2022-3005TRUNG BÌNH 5.4Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
• CVE-2022-3004TRUNG BÌNH 5.4Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
• CVE-2022-3000TRUNG BÌNH 5.4Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
• CVE-2022-2924TRUNG BÌNH 5.4Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.3.