CVE-2022-2829

Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...

CVE-2022-2829 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...

CVE-2022-2829

CVE-2022-2829 is a stored XSS in YetiForceCRM prior to version 6.4.0. Several connected sources identify the root cause as improper sanitization in a link field used when importing RSS feeds, allowing injected XML to execute script in the victim’s browser. Public sources consistently describe the...