Skip to content
OpenAdvisories

Product · Bottelet

flarepoint

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2022-22109

    DayByDay CRM - Stored Cross-Site Scripting (XSS) in Task Title

    In Daybyday CRM, version 2.2.0 is vulnerable to Stored Cross-Site Scripting (XSS) vulnerability that allows low privileged application users to store malicious scripts in the title field of new tasks. These scripts are executed in a victim’s browser when they…

    Bottelet DaybydayCRM flarepoint bottelet/flarepoint Packagist
  • Medium 4.3
    CVE-2022-22108

    DayByDay CRM - Missing Authorization when Viewing Absences

    In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account (employee type user), can view the absences of all users in the system including administrators. This type of user is not…

    Bottelet DaybydayCRM flarepoint bottelet/flarepoint Packagist
  • Medium 4.3
    CVE-2022-22107

    DayByDay CRM - Missing Authorization when Viewing Appointments

    In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account (employee type user), can view the appointments of all users in the system including administrators. However, this type o…

    Bottelet DaybydayCRM flarepoint bottelet/flarepoint Packagist