Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-3002 EUVD-2022-7162GHSA-v9fj-h8g6-4w9q

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Published Oct 6, 2022 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: yetiforcecompany Product: yetiforcecompany/yetiforcecrm Package: yetiforce/yetiforce-crm Ecosystem: Packagist

Description

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

Affected products

VendorProductAffectedFixed
yetiforcecompany yetiforcecompany/yetiforcecrm unspecified – < 6.4.0 6.4.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist yetiforce/yetiforce-crm <= 6.4.0 — GHSA-v9fj-h8g6-4w9q

References