Skip to content
OpenAdvisories
High · 7.0 CVE-2022-1340 EUVD-2022-6637GHSA-w83m-rghh-frxj

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Published Aug 22, 2022 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: yetiforcecompany Product: yetiforcecompany/yetiforcecrm Package: yetiforce/yetiforce-crm Ecosystem: Packagist

Description

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

Affected products

VendorProductAffectedFixed
yetiforcecompany yetiforcecompany/yetiforcecrm unspecified – < 6.4.0 6.4.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist yetiforce/yetiforce-crm < 6.4.0 6.4.0 GHSA-w83m-rghh-frxj

References