CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Vulnrichment•added 2022/09/20 9:40 a.m.•4 views

CVE-2022-3004 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...

6.3CVSS5.9AI score0.00512EPSS

Exploits1References2

OSV•added 2022/09/20 9:40 a.m.•23 views

CVE-2022-3004 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...

6.3CVSS6.4AI score0.00512EPSS

Exploits1References4

CVE•added 2022/09/20 9:40 a.m.•76 views

CVE-2022-3004

Summary: CVE-2022-3004 is a stored XSS vulnerability in YetiForce CRM, affecting versions prior to 6.4.0, reported across multiple sources (OSV, Red Hat, GHSA, CNNVD, CVE records). What is affected: YetiForce CRM in the Workflow module; vulnerability arises from unvalidated/undefined workflowMode...

6.3CVSS5.4AI score0.00512EPSS

Exploits1References2Affected Software1