Daybydaycrm
Daybydaycrm Daybyday: vulnerabilidades y CVE
Daybydaycrm Daybyday tiene 6 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-22113 | Alta (8.8) | 1.0% | — | 13 ene 2022 | In DayByDay CRM, versions 2.2.0 through 2.2.1 (latest) are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an administrator, a user that was already logged in, will… |
| CVE-2022-22112 | Media (5.4) | 0.62% | — | 13 ene 2022 | In DayByDay CRM, versions 1.1 through 2.2.1 (latest) suffer from an application-wide Client-Side Template Injection (CSTI). A low privileged attacker can input template injection payloads in the application at various… |
| CVE-2020-35707 | Media (5.4) | 0.60% | — | 25 dic 2020 | Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen. |
| CVE-2020-35706 | Media (5.4) | 0.60% | — | 25 dic 2020 | Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen. |
| CVE-2020-35705 | Media (5.4) | 0.60% | — | 25 dic 2020 | Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen. |
| CVE-2020-35704 | Media (5.4) | 0.60% | — | 25 dic 2020 | Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen. |