TI-2022-06460 CVE-2022-22113 · GHSA-rjr7-pjq2-v9j9
DayByDay CRM - Insufficient Session Expiration after Password Change
Priority MEDIUM 40
In DayByDay CRM, versions 2.2.0 through 2.2.1 (latest) are vulnerable to Insufficient Session Expiration.
Bottelet
Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Bottelet records in CISA KEVNo Bottelet vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Daybyday · all components
TI-2022-06459 CVE-2022-22112 · GHSA-3xgw-mp56-cmcq
DayByDay CRM - Application-Wide Client-Side Template Injection (CSTI)
Priority LOW 25
In DayByDay CRM, versions 1.1 through 2.2.1 (latest) suffer from an application-wide Client-Side Template Injection (CSTI).
TI-2020-18167 CVE-2020-35707 · GHSA-hjwx-j74m-7j88
Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen.
Priority LOW 25
Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen.
TI-2020-18166 CVE-2020-35706 · GHSA-9hp5-8ggx-fcqr
Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen.
Priority LOW 25
Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen.
TI-2020-18165 CVE-2020-35705 · GHSA-9cr8-cgwr-97w6
Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen.
Priority LOW 25
Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen.
TI-2020-18164 CVE-2020-35704 · GHSA-6mvg-7752-5v6p
Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen.
Priority LOW 25
Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen.