CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Vulnrichment•added 2022/09/20 9:40 a.m.•5 views

CVE-2022-3004 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...

6.3CVSS5.9AI score0.00531EPSS

SaveExploits1References2

CVE•added 2022/09/20 9:40 a.m.•82 views

CVE-2022-3004

Summary: CVE-2022-3004 is a stored XSS vulnerability in YetiForce CRM, affecting versions prior to 6.4.0, reported across multiple sources (OSV, Red Hat, GHSA, CNNVD, CVE records). What is affected: YetiForce CRM in the Workflow module; vulnerability arises from unvalidated/undefined workflowMode...

6.3CVSS5.4AI score0.00531EPSS

SaveExploits1References2Affected Software1

OSV•added 2022/09/20 9:40 a.m.•30 views

CVE-2022-3004 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...

6.3CVSS6.4AI score

SaveExploits0References4

Cvelist•added 2022/09/20 9:40 a.m.•50 views

CVE-2022-3004 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...

6.3CVSS5.5AI score0.00531EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by