medium5.4
CVE-2021-4116
yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Impact
yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yetiforce | Yetiforce Customer Relationship Management | through 6.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/yetiforcecompany/yetiforcecrm/commit/9cdb012ca64ff1f719f8120d5fd162cd5ef1013f
- https://huntr.dev/bounties/7561bae7-9053-4dc8-aa59-b71acfb1712c
- https://github.com/yetiforcecompany/yetiforcecrm/commit/9cdb012ca64ff1f719f8120d5fd162cd5ef1013f
- https://huntr.dev/bounties/7561bae7-9053-4dc8-aa59-b71acfb1712c