Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2022-22112

DayByDay CRM - Application-Wide Client-Side Template Injection (CSTI)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Mend

Description

In DayByDay CRM, versions 1.1 through 2.2.1 (latest) suffer from an application-wide Client-Side Template Injection (CSTI). A low privileged attacker can input template injection payloads in the application at various locations to execute JavaScript on the client browser.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bottelet DaybydayCRM

  • 1.1 to < unspecifiedaffected

References