Vulnerabilities

TI-2022-02773 CVE-2022-3005 · GHSA-vx3x-hwph-grvw

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0065 Published 2022-09-20 Fixed in 6.4.0 CWE-79

TI-2022-02772 CVE-2022-3004 · GHSA-qwc8-vjh3-gm2j

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0065 Published 2022-09-20 Fixed in 6.4.0 CWE-79

TI-2022-02769 CVE-2022-3000 · GHSA-mqh9-5jp9-6799

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0065 Published 2022-09-20 Fixed in 6.4.0 CWE-79