Cross site scripting

2020-12-2506:15:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen.

CPENameOperatorVersion
daybydayeq2.1.0

CPE	Name	Operator	Version
	daybyday	eq	2.1.0

References

github.com/Bottelet/DaybydayCRM/releases

tufangungor.github.io/exploit/2020/12/12/daybydaycrm-2.1.0-multiple-stored-xss.html