CVE-2021-4107

Impact

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').

Affected packages

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• GitHub advisory
• https://github.com/yetiforcecompany/yetiforcecrm/commit/a062d3d5fecb000db207a2ad8a446db97ad96b89
• https://huntr.dev/bounties/1d124520-cf29-4539-a0f3-6d041af7b5a8
• https://github.com/advisories/GHSA-rp42-c45j-g46x
• https://nvd.nist.gov/vuln/detail/CVE-2021-4107