YetiForce CRM vulnerable to stored Cross-site Scripting

CVE-2022-3002

Affected version: <=6.4.0

Reported by:
GitHub

YetiForce CRM vulnerable to stored Cross-site Scripting via LayoutEditor module

CVE-2022-3000

Affected version: <=6.4.0

Reported by:
GitHub

YetiForce CRM vulnerable to stored Cross-site Scripting via SlaPolicy module

CVE-2022-3005

Affected version: <=6.4.0

Reported by:
GitHub

YetiForce CRM vulnerable to stored Cross-site Scripting via WorkFlow module

CVE-2022-3004

Affected version: <=6.4.0

Reported by:
GitHub

YetiForce CRM vulnerable to stored Cross-site Scripting via WidgetsManagement module

CVE-2022-2924

Affected version: <=6.4.0

Reported by:
GitHub

Cross site scripting in yetiforce/yetiforce-crm

CVE-2022-1340

Affected version: <6.4.0

Reported by:
GitHub

Cross site scripting in yetiforce/yetiforce-crm

CVE-2022-2890

Affected version: <6.4.0

Reported by:
GitHub

Cross site scripting in yetiforce/yetiforce-crm

CVE-2022-2885

Affected version: <6.4.0

Reported by:
GitHub

Unrestricted Upload of File with Dangerous Type in yetiforce-crm

CVE-2022-1411

Affected version: <6.4.0

Reported by:
GitHub

Cross-Site Request Forgery in yetiforce

CVE-2022-0269

Affected version: <=6.3.0

Reported by:
GitHub

yetiforcecrm is vulnerable to Cross-site Scripting

CVE-2021-4121

Affected version: <=6.3.0

Reported by:
GitHub

YetiForceCRM is vulnerable to Business Logic Errors because product amount can be a negative number

CVE-2021-4111

Affected version: <=6.3.0

Reported by:
GitHub

YetiForceCRM is vulnerable to Business Logic Errors in the weight of a product

CVE-2021-4117

Affected version: <=6.3.0

Reported by:
GitHub

yetiforcecrm is vulnerable to Cross-site Scripting

CVE-2021-4116

Affected version: <=6.3.0

Reported by:
GitHub

yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF)

CVE-2021-4092

Affected version: <6.3.0

Reported by:
GitHub

yetiforcecrm is vulnerable to Cross-site Scripting

CVE-2021-4107

Affected version: <=6.3.0

Reported by:
GitHub