All products

yetiforce/yetiforce-crm

Composer · Package
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
YetiForceCRM Directory Traversal vulnerabilityCVE-2023-49508 · GHSA-394M-VXWJ-363J yetiforce/yetiforce-crm Composer Medium Fix reported
Cross-Site Request Forgery in yetiforceCVE-2022-0269 · GHSA-7G7R-GR46-Q4P5 yetiforce/yetiforce-crm Composer High No fix reported
YetiForce CRM vulnerable to stored Cross-site Scripting via SlaPolicy moduleCVE-2022-3005 · GHSA-VX3X-HWPH-GRVW yetiforce/yetiforce-crm Composer Medium No fix reported
YetiForce CRM vulnerable to stored Cross-site Scripting via WorkFlow moduleCVE-2022-3004 · GHSA-QWC8-VJH3-GM2J yetiforce/yetiforce-crm Composer Medium No fix reported
YetiForce CRM vulnerable to stored Cross-site Scripting via LayoutEditor moduleCVE-2022-3000 · GHSA-MQH9-5JP9-6799 yetiforce/yetiforce-crm Composer Medium No fix reported
YetiForce CRM vulnerable to stored Cross-site ScriptingCVE-2022-3002 · GHSA-V9FJ-H8G6-4W9Q yetiforce/yetiforce-crm Composer Medium No fix reported
YetiForce CRM vulnerable to stored Cross-site Scripting via WidgetsManagement moduleCVE-2022-2924 · GHSA-2QF8-H7PR-X2R8 yetiforce/yetiforce-crm Composer Medium No fix reported
Cross site scripting in yetiforce/yetiforce-crmCVE-2022-2890 · GHSA-JHXH-68JJ-68C7 yetiforce/yetiforce-crm Composer Medium Fix reported
Cross site scripting in yetiforce/yetiforce-crmCVE-2022-2885 · GHSA-RJVC-MF7R-CH7R yetiforce/yetiforce-crm Composer Medium Fix reported
Unrestricted Upload of File with Dangerous Type in yetiforce-crmCVE-2022-1411 · GHSA-PQR6-3J58-9W58 yetiforce/yetiforce-crm Composer Medium Fix reported
Cross site scripting in yetiforce/yetiforce-crmCVE-2022-1340 · GHSA-W83M-RGHH-FRXJ yetiforce/yetiforce-crm Composer Medium Fix reported
yetiforcecrm is vulnerable to Cross-site ScriptingCVE-2021-4121 · GHSA-J85F-XW9X-FFWP yetiforce/yetiforce-crm Composer Medium No fix reported
yetiforcecrm is vulnerable to Cross-site ScriptingCVE-2021-4116 · GHSA-FWH7-V4GF-XV7W yetiforce/yetiforce-crm Composer Medium No fix reported
YetiForceCRM is vulnerable to Business Logic Errors in the weight of a productCVE-2021-4117 · GHSA-CXG7-84WP-8PCQ yetiforce/yetiforce-crm Composer Medium No fix reported
YetiForceCRM is vulnerable to Business Logic Errors because product amount can be a negative numberCVE-2021-4111 · GHSA-7V7W-F7C6-F829 yetiforce/yetiforce-crm Composer High No fix reported
yetiforcecrm is vulnerable to Cross-site ScriptingCVE-2021-4107 · GHSA-RP42-C45J-G46X yetiforce/yetiforce-crm Composer Medium No fix reported
yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF)CVE-2021-4092 · GHSA-V4CR-M5F8-GXW8 yetiforce/yetiforce-crm Composer Medium Fix reported