Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2022/01/08 12:32 a.m.34 views

Cross-site Scripting in DayByDay CRM

In Daybyday CRM, version 2.2.0 is vulnerable to Stored Cross-Site Scripting XSS vulnerability that allows low privileged application users to store malicious scripts in the title field of new tasks. These scripts are executed in a victim’s browser when they open the “/tasks” page to view all the...

5.4CVSS4.3AI score0.00531EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2022/01/05 3:15 p.m.44 views

CVE-2022-22109

In Daybyday CRM, version 2.2.0 is vulnerable to Stored Cross-Site Scripting XSS vulnerability that allows low privileged application users to store malicious scripts in the title field of new tasks. These scripts are executed in a victim’s browser when they open the “/tasks” page to view all the...

5.4CVSS0.00531EPSS
SaveExploits0References2
Rows per page
Query Builder