Skip to content
OpenAdvisories
High · 7.1 CVE-2022-2924 EUVD-2022-6669GHSA-2qf8-h7pr-x2r8

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Published Sep 20, 2022 · Updated May 29, 2025 · Assigned by @huntrdev

Vendor: yetiforcecompany Product: yetiforcecompany/yetiforcecrm Package: yetiforce/yetiforce-crm Ecosystem: Packagist

Description

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.3.

Affected products

VendorProductAffectedFixed
yetiforcecompany yetiforcecompany/yetiforcecrm unspecified – < 6.3 6.3

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist yetiforce/yetiforce-crm <= 6.4.0 — GHSA-2qf8-h7pr-x2r8

References