Bottelet vulnerabilities

Products

• Daybydaycrm 10
• Flarepoint 5

Newest

• bottelet daybydaycrm DaybydayCRM through 2.2.1 Missing Authorization via ProjectsController updateAssign CVE-2026-116008 5.3 MediumOctober 24, 2026
• bottelet daybydaycrm Bottelet DaybydayCRM Setting missing authentication CVE-2026-10283 5.3 MediumJune 1, 2026
• bottelet daybydaycrm Bottelet DaybydayCRM DocumentsController.php view improper authorization CVE-2026-10282 5.3 MediumJune 1, 2026
• daybydaycrm daybyday, bottelet daybydaycrm +1 more DayByDay CRM - Insufficient Session Expiration after Password Change CVE-2022-22113 8.8 HighJanuary 13, 2022
• daybydaycrm daybyday, bottelet daybydaycrm +1 more DayByDay CRM - Application-Wide Client-Side Template Injection (CSTI) CVE-2022-22112 5.4 MediumJanuary 13, 2022
• daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 more DayByDay CRM - Missing Authorization when Changing Password CVE-2022-22111 Fix available 8.8 HighJanuary 5, 2022
• daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 more DayByDay CRM - Weak Password Requirements in Update User CVE-2022-22110 Fix available 7.5 HighJanuary 5, 2022
• daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 more DayByDay CRM - Stored Cross-Site Scripting (XSS) in Task Title CVE-2022-22109 Fix available 5.4 MediumJanuary 5, 2022
• daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 more DayByDay CRM - Missing Authorization when Viewing Absences CVE-2022-22108 Fix available 4.3 MediumJanuary 5, 2022
• daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 more DayByDay CRM - Missing Authorization when Viewing Appointments CVE-2022-22107 Fix available 4.3 MediumJanuary 5, 2022