Skip to content

Daybydaycrm Daybyday vulnerabilities

daybydaycrm daybyday, bottelet daybydaycrm +1 moreDayByDay CRM - Insufficient Session Expiration after Password ChangeCVE-2022-221138.8 HighJanuary 13, 2022
daybydaycrm daybyday, bottelet daybydaycrm +1 moreDayByDay CRM - Application-Wide Client-Side Template Injection (CSTI)CVE-2022-221125.4 MediumJanuary 13, 2022
daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 moreDayByDay CRM - Missing Authorization when Changing PasswordCVE-2022-22111Fix available8.8 HighJanuary 5, 2022
daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 moreDayByDay CRM - Weak Password Requirements in Update UserCVE-2022-22110Fix available7.5 HighJanuary 5, 2022
daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 moreDayByDay CRM - Stored Cross-Site Scripting (XSS) in Task TitleCVE-2022-22109Fix available5.4 MediumJanuary 5, 2022
daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 moreDayByDay CRM - Missing Authorization when Viewing AbsencesCVE-2022-22108Fix available4.3 MediumJanuary 5, 2022
daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 moreDayByDay CRM - Missing Authorization when Viewing AppointmentsCVE-2022-22107Fix available4.3 MediumJanuary 5, 2022
daybydaycrm daybydayDaybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen.CVE-2020-357045.4 MediumDecember 25, 2020
daybydaycrm daybydayDaybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen.CVE-2020-357055.4 MediumDecember 25, 2020
daybydaycrm daybydayDaybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen.CVE-2020-357065.4 MediumDecember 25, 2020
daybydaycrm daybydayDaybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen.CVE-2020-357075.4 MediumDecember 25, 2020