Lucene search
Veracode Vulnerability DatabaseVERACODE:37437HistoryOct 07, 2022 - 6:20 a.m.
Cross-site Scripting (XSS)
2022-10-0706:20:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
cross-site scripting
yetiforce-crm
editviewblocks.tpl
vulnerability
javascript
EPSS
0.001
Percentile
21.4%
yetiforce/yetiforce-crm is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in the name attribute in EditViewBlocks.tpl allowing an attacker to inject and execute malicious JavaScript.
Related
prion
prion
Cross site scripting
2022-10-06 18:16:00
cnvd
cnvd
YetiForceCrm Cross-Site Scripting Vulnerability (CNVD-2022-69154)
2022-10-10 00:00:00
cvelist
cvelist
huntr
huntr
Persistent Cross Site Scripting - BusinessHours Module - Settings
2022-08-19 17:57:00
nvd
nvd
CVE-2022-3002
2022-10-06 18:16:19
cve
cve
CVE-2022-3002
2022-10-06 18:16:19
osv
osv
CVE-2022-3002
2022-10-06 18:16:19
YetiForce CRM vulnerable to stored Cross-site Scripting
2022-10-06 18:52:03
github
github
YetiForce CRM vulnerable to stored Cross-site Scripting
2022-10-06 18:52:03