๐Ÿ” CVE Alert

CVE-2022-3002

MEDIUM 5.4

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

CWE CWE-79
Vendor yetiforcecompany
Product yetiforcecompany/yetiforcecrm
Published Oct 6, 2022
Last Updated Aug 3, 2024
Stay Ahead of the Next One

Get instant alerts for yetiforcecompany yetiforcecompany/yetiforcecrm

Be the first to know when new medium vulnerabilities affecting yetiforcecompany yetiforcecompany/yetiforcecrm are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected Versions

yetiforcecompany / yetiforcecompany/yetiforcecrm
unspecified < 6.4.0

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
huntr.dev: https://huntr.dev/bounties/d213d7ea-fe92-40b2-a1f9-2ba32dec50f5 github.com: https://github.com/yetiforcecompany/yetiforcecrm/commit/54728becfdad9b6e686bbe336007cba2ce518248