medium5.4
CVE-2020-35707
Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen.
Impact
Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Daybydaycrm | Daybyday | Version 2.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/Bottelet/DaybydayCRM/releases
- https://tufangungor.github.io/exploit/2020/12/12/daybydaycrm-2.1.0-multiple-stored-xss.html
- https://github.com/Bottelet/DaybydayCRM/releases
- https://tufangungor.github.io/exploit/2020/12/12/daybydaycrm-2.1.0-multiple-stored-xss.html