Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-3002

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-v9fj-h8g6-4w9q

YetiForce CRM vulnerable to stored Cross-site Scripting YetiForce CRM version 6.4.0 and prior is vulnerable to stored cross-site scripting. A patch https://github.com/yetiforcecompany/yetiforcecrm/commit/54728becfdad9b6e686bbe336007cba2ce518248 is available on the `developer` branch.

gitlab/packagist/yetiforce/yetiforce-crm/CVE-2022-3002

YetiForce CRM vulnerable to stored Cross-site Scripting Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.