CVE-2020-35705

Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen...

CVE-2020-35706

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen...

CVE-2020-35706

CVE-2020-35706 affects Daybyday 2.1.0. The vulnerability is a stored XSS in the Title parameter of the New Project screen. The root cause is improper handling/sanitization of user-supplied input for that field, enabling injected scripts to persist and potentially execute in contexts where the pro...

CVE-2020-35707

CVE-2020-35707 affects Daybyday 2.1.0. The vulnerability is a stored XSS in the Company Name parameter on the New Client screen. Impact is described as a stored cross-site scripting flaw that can affect the application when user-supplied input is not properly sanitized. The CVE record lists the v...

CVE-2020-35707

Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen...

Bottelet Daybyday Crm Cross-Site Scripting Vulnerability

Bottelet Daybyday Crm is a builder system for task, time, employee, and vacation management by Bottelet Personal Developers. A cross-site scripting vulnerability exists in Bottelet Daybyday Crm 2.1.0, which allows storing XSS via the Name parameter to a new user screen...

Bottelet Daybyday Crm Cross-Site Scripting Vulnerability

Bottelet Daybyday Crm is a website builder for task, time, employee, and vacation management by Bottelet Personal Developers. A cross-site scripting vulnerability exists in Daybyday 2.1.0 that allows storing XSS to the New Item screen via the title parameter...

Bottelet Daybyday Crm Cross-Site Scripting Vulnerability

Bottelet Daybyday Crm is a builder system for task, time, employee, and vacation management by Bottelet Personal Developers. A cross-site scripting vulnerability exists in Bottelet Daybyday Crm 2.1.0, which allows storing XSS via the company name parameter to a new client screen...

Bottelet Daybyday Crm 跨站脚本漏洞

Daybyday is a customer relationship management system. A stored cross-site scripting vulnerability exists in Daybyday 2.1.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the Title parameter of the New Lead screen...