EUVD-2020-23362

Malware in sbrugna...

CVE-2020-35707

Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen...

CVE-2020-35706

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen...

CVE-2020-35705

Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen...

CVE-2020-35704

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen...

CVE-2020-35704

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen...

Cross site scripting

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen...

Cross site scripting

Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen...

Cross site scripting

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen...

Cross site scripting

Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen...

CVE-2020-35704

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen...

CVE-2020-35705

The CVE-2020-35705 entry affects Daybyday 2.1.0, where a stored XSS vulnerability exists in the New User screen via the Name parameter. The issue is documented across multiple feeds, with CVSSv3.1 base score 5.4 (MEDIUM) and CVSSv2 base score 3.5 (LOW) indicating the impact is limited to confiden...

CVE-2020-35706

CVE-2020-35706 affects Daybyday 2.1.0. The vulnerability is a stored XSS in the Title parameter of the New Project screen. The root cause is improper handling/sanitization of user-supplied input for that field, enabling injected scripts to persist and potentially execute in contexts where the pro...

CVE-2020-35707

Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen...