Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
yetiforce/yetiforce-crm
Composer
· Package
17 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
YetiForceCRM Directory Traversal vulnerability
CVE-2023-49508 · GHSA-394M-VXWJ-363J
yetiforce/yetiforce-crm
Composer
Medium
Fix reported
2025-03-27
Cross-Site Request Forgery in yetiforce
CVE-2022-0269 · GHSA-7G7R-GR46-Q4P5
yetiforce/yetiforce-crm
Composer
High
No fix reported
2024-02-16
YetiForce CRM vulnerable to stored Cross-site Scripting via SlaPolicy module
CVE-2022-3005 · GHSA-VX3X-HWPH-GRVW
yetiforce/yetiforce-crm
Composer
Medium
No fix reported
2023-11-08
YetiForce CRM vulnerable to stored Cross-site Scripting via WorkFlow module
CVE-2022-3004 · GHSA-QWC8-VJH3-GM2J
yetiforce/yetiforce-crm
Composer
Medium
No fix reported
2023-11-08
YetiForce CRM vulnerable to stored Cross-site Scripting via LayoutEditor module
CVE-2022-3000 · GHSA-MQH9-5JP9-6799
yetiforce/yetiforce-crm
Composer
Medium
No fix reported
2023-11-08
YetiForce CRM vulnerable to stored Cross-site Scripting
CVE-2022-3002 · GHSA-V9FJ-H8G6-4W9Q
yetiforce/yetiforce-crm
Composer
Medium
No fix reported
2023-11-08
YetiForce CRM vulnerable to stored Cross-site Scripting via WidgetsManagement module
CVE-2022-2924 · GHSA-2QF8-H7PR-X2R8
yetiforce/yetiforce-crm
Composer
Medium
No fix reported
2023-11-08
Cross site scripting in yetiforce/yetiforce-crm
CVE-2022-2890 · GHSA-JHXH-68JJ-68C7
yetiforce/yetiforce-crm
Composer
Medium
Fix reported
2023-11-08
Cross site scripting in yetiforce/yetiforce-crm
CVE-2022-2885 · GHSA-RJVC-MF7R-CH7R
yetiforce/yetiforce-crm
Composer
Medium
Fix reported
2023-11-08
Unrestricted Upload of File with Dangerous Type in yetiforce-crm
CVE-2022-1411 · GHSA-PQR6-3J58-9W58
yetiforce/yetiforce-crm
Composer
Medium
Fix reported
2023-11-08
Cross site scripting in yetiforce/yetiforce-crm
CVE-2022-1340 · GHSA-W83M-RGHH-FRXJ
yetiforce/yetiforce-crm
Composer
Medium
Fix reported
2023-11-08
yetiforcecrm is vulnerable to Cross-site Scripting
CVE-2021-4121 · GHSA-J85F-XW9X-FFWP
yetiforce/yetiforce-crm
Composer
Medium
No fix reported
2023-11-08
yetiforcecrm is vulnerable to Cross-site Scripting
CVE-2021-4116 · GHSA-FWH7-V4GF-XV7W
yetiforce/yetiforce-crm
Composer
Medium
No fix reported
2023-11-08
YetiForceCRM is vulnerable to Business Logic Errors in the weight of a product
CVE-2021-4117 · GHSA-CXG7-84WP-8PCQ
yetiforce/yetiforce-crm
Composer
Medium
No fix reported
2023-11-08
YetiForceCRM is vulnerable to Business Logic Errors because product amount can be a negative number
CVE-2021-4111 · GHSA-7V7W-F7C6-F829
yetiforce/yetiforce-crm
Composer
High
No fix reported
2023-11-08
yetiforcecrm is vulnerable to Cross-site Scripting
CVE-2021-4107 · GHSA-RP42-C45J-G46X
yetiforce/yetiforce-crm
Composer
Medium
No fix reported
2023-11-08
yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-4092 · GHSA-V4CR-M5F8-GXW8
yetiforce/yetiforce-crm
Composer
Medium
Fix reported
2023-11-08