medium4.8
CVE-2022-2885
Cross site scripting in yetiforce/yetiforce-crm
Impact
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | yetiforce/yetiforce-crm | < 6.4.0 | 6.4.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yetiforce | Yetiforce Customer Relationship Management | before 6.4.0 |