Description

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

Remediation

References

CVE-2022-3000

Related Vulnerabilities

Oracle JRE CVE-2010-0840 Vulnerability (CVE-2010-0840)

WordPress Plugin Rockhoist Ratings SQL Injection (1.2.1)

phpMyFAQ Permission Issues Vulnerability (CVE-2014-6047)

Moodle Improper Input Validation Vulnerability (CVE-2012-0801)

WordPress Plugin All-in-One WP Migration Cross-Site Scripting (6.45)

Severity

Medium

Classification

CVE-2022-3000 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities