Skip to content
OpenAdvisories
Medium · 6.6 CVE-2021-4116 EUVD-2021-2515GHSA-fwh7-v4gf-xv7w

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Published Dec 15, 2021 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: yetiforcecompany Product: yetiforcecompany/yetiforcecrm Package: yetiforce/yetiforce-crm Ecosystem: Packagist

Description

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

VendorProductAffectedFixed
yetiforcecompany yetiforcecompany/yetiforcecrm unspecified – < 6.4.0 6.4.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist yetiforce/yetiforce-crm <= 6.3.0 — GHSA-fwh7-v4gf-xv7w

References