Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-22109
HistoryJan 05, 2022 - 3:15 p.m.

Cross site scripting

2022-01-0515:15:00
PRIOn knowledge base
www.prio-n.com
5

0.001 Low

EPSS

Percentile

19.5%

In Daybyday CRM, version 2.2.0 is vulnerable to Stored Cross-Site Scripting (XSS) vulnerability that allows low privileged application users to store malicious scripts in the title field of new tasks. These scripts are executed in a victim’s browser when they open the “/tasks” page to view all the tasks.

CPENameOperatorVersion
daybyday_crmeq2.2.0

0.001 Low

EPSS

Percentile

19.5%

Related for PRION:CVE-2022-22109