Vulnerability CVE-2022-3000
Published: 2022-09-20

Description:
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

Type:

CWE-79

 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://huntr.dev/bounties/a060d3dd-6fdd-4958-82a9-364df1cb770c
https://github.com/yetiforcecompany/yetiforcecrm/commit/eebc12601495ada38495076bec12841b2477516b
Copyright 2024, cxsecurity.com

 

Back to Top