TI-2022-06460 CVE-2022-22113 · GHSA-rjr7-pjq2-v9j9
DayByDay CRM - Insufficient Session Expiration after Password Change
Priority MEDIUM 40
In DayByDay CRM, versions 2.2.0 through 2.2.1 (latest) are vulnerable to Insufficient Session Expiration.
Vulnerabilities
6 records
TI-2022-06459 CVE-2022-22112 · GHSA-3xgw-mp56-cmcq
DayByDay CRM - Application-Wide Client-Side Template Injection (CSTI)
Priority LOW 25
In DayByDay CRM, versions 1.1 through 2.2.1 (latest) suffer from an application-wide Client-Side Template Injection (CSTI).
TI-2020-18164 CVE-2020-35704 · GHSA-6mvg-7752-5v6p
Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen.
Priority LOW 25
Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen.
TI-2020-18165 CVE-2020-35705 · GHSA-9cr8-cgwr-97w6
Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen.
Priority LOW 25
Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen.
TI-2020-18166 CVE-2020-35706 · GHSA-9hp5-8ggx-fcqr
Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen.
Priority LOW 25
Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen.
TI-2020-18167 CVE-2020-35707 · GHSA-hjwx-j74m-7j88
Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen.
Priority LOW 25
Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen.