Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 10:48 p.m.•14 views

CVE-2022-3000

Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...

6.3CVSS5.9AI score0.0065EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2022/09/20 7:10 a.m.•9 views

CVE-2022-3000 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...

6.3CVSS5.9AI score0.0065EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/09/20 7:10 a.m.•45 views

CVE-2022-3000 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...

6.3CVSS5.5AI score0.0065EPSS
SaveExploits1References2
OSV
OSV
•added 2022/09/20 7:10 a.m.•39 views

CVE-2022-3000 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...

6.3CVSS6.4AI score
SaveExploits0References4
CVE
CVE
•added 2022/09/20 7:10 a.m.•115 views

CVE-2022-3000

YetiForce CRM (prior to 6.4.0) is affected by a stored XSS in the LayoutEditor module. The vulnerability stems from an unvalidated title parameter passed to LayoutEditor/EditField.tpl, allowing arbitrary JavaScript execution. A patch is available at commit eebc12601495ada38495076bec12841b2477516b...

6.3CVSS6.4AI score0.0065EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder