Executive brief
YetiForce CRM vulnerable to stored Cross-site Scripting via WidgetsManagement module
Affected products
- Packagist yetiforce/yetiforce-crm
Junglewise Threat Intelligence
CVE-2022-2924: YetiForce CRM vulnerable to stored Cross-site Scripting via WidgetsManagement module
CVE-2022-2924 · Severity: low · CVSS 3.1 · Published 2022-09-21
Technologies: yetiforce/yetiforce-crm (Packagist). Vendors: Packagist.
Related threats
- YetiForceCRM Directory Traversal vulnerability
- YetiForce CRM vulnerable to stored Cross-site Scripting
- YetiForce CRM vulnerable to stored Cross-site Scripting via LayoutEditor module
- YetiForce CRM vulnerable to stored Cross-site Scripting via WorkFlow module
- YetiForce CRM vulnerable to stored Cross-site Scripting via SlaPolicy module