Vulnerability CVE-2022-3002
Published: 2022-10-06

Description:
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

Type:

CWE-79

 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://github.com/yetiforcecompany/yetiforcecrm/commit/54728becfdad9b6e686bbe336007cba2ce518248
https://huntr.dev/bounties/d213d7ea-fe92-40b2-a1f9-2ba32dec50f5
Copyright 2026, cxsecurity.com

 

Back to Top