Daybydaycrm vulnerabilities

Products

• Daybyday 6
• Daybyday Crm 5

Newest

• daybydaycrm daybyday, bottelet daybydaycrm +1 more DayByDay CRM - Insufficient Session Expiration after Password Change CVE-2022-22113 8.8 HighJanuary 13, 2022
• daybydaycrm daybyday, bottelet daybydaycrm +1 more DayByDay CRM - Application-Wide Client-Side Template Injection (CSTI) CVE-2022-22112 5.4 MediumJanuary 13, 2022
• daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 more DayByDay CRM - Missing Authorization when Changing Password CVE-2022-22111 Fix available 8.8 HighJanuary 5, 2022
• daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 more DayByDay CRM - Weak Password Requirements in Update User CVE-2022-22110 Fix available 7.5 HighJanuary 5, 2022
• daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 more DayByDay CRM - Stored Cross-Site Scripting (XSS) in Task Title CVE-2022-22109 Fix available 5.4 MediumJanuary 5, 2022
• daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 more DayByDay CRM - Missing Authorization when Viewing Absences CVE-2022-22108 Fix available 4.3 MediumJanuary 5, 2022
• daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 more DayByDay CRM - Missing Authorization when Viewing Appointments CVE-2022-22107 Fix available 4.3 MediumJanuary 5, 2022
• daybydaycrm daybyday Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen. CVE-2020-35704 5.4 MediumDecember 25, 2020
• daybydaycrm daybyday Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen. CVE-2020-35705 5.4 MediumDecember 25, 2020
• daybydaycrm daybyday Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen. CVE-2020-35706 5.4 MediumDecember 25, 2020
• daybydaycrm daybyday Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen. CVE-2020-35707 5.4 MediumDecember 25, 2020