MEDIUM5.4Packagist
GHSA-vx3x-hwph-grvw· CVE-2022-3005YetiForce CRM vulnerable to stored Cross-site Scripting via SlaPolicy module
Modified: 11/8/2023
package
Packagist/yetiforce/yetiforce-crm
pkg:packagist/yetiforce/yetiforce-crm
MEDIUM5.4Packagist
GHSA-w83m-rghh-frxj· CVE-2022-1340Cross site scripting in yetiforce/yetiforce-crm
Modified: 11/8/2023
MEDIUM5.4Packagist
GHSA-2qf8-h7pr-x2r8· CVE-2022-2924YetiForce CRM vulnerable to stored Cross-site Scripting via WidgetsManagement module
Modified: 11/8/2023
MEDIUM6.5Packagist
GHSA-394m-vxwj-363j· CVE-2023-49508YetiForceCRM Directory Traversal vulnerability
Modified: 3/27/2025
HIGH8.0Packagist
GHSA-7g7r-gr46-q4p5· CVE-2022-0269Cross-Site Request Forgery in yetiforce
Modified: 2/16/2024
HIGH7.3Packagist
GHSA-7v7w-f7c6-f829· CVE-2021-4111YetiForceCRM is vulnerable to Business Logic Errors because product amount can be a negative number
Modified: 11/8/2023
MEDIUM4.3Packagist
GHSA-cxg7-84wp-8pcq· CVE-2021-4117YetiForceCRM is vulnerable to Business Logic Errors in the weight of a product
Modified: 11/8/2023
MEDIUM6.6Packagist
GHSA-fwh7-v4gf-xv7w· CVE-2021-4116yetiforcecrm is vulnerable to Cross-site Scripting
Modified: 11/8/2023
MEDIUM6.4Packagist
GHSA-j85f-xw9x-ffwp· CVE-2021-4121yetiforcecrm is vulnerable to Cross-site Scripting
Modified: 11/8/2023
MEDIUM5.4Packagist
GHSA-jhxh-68jj-68c7· CVE-2022-2890Cross site scripting in yetiforce/yetiforce-crm
Modified: 11/8/2023
MEDIUM5.4Packagist
GHSA-mqh9-5jp9-6799· CVE-2022-3000YetiForce CRM vulnerable to stored Cross-site Scripting via LayoutEditor module
Modified: 11/8/2023
MEDIUM6.1Packagist
GHSA-pqr6-3j58-9w58· CVE-2022-1411Unrestricted Upload of File with Dangerous Type in yetiforce-crm
Modified: 11/8/2023
MEDIUM5.4Packagist
GHSA-qwc8-vjh3-gm2j· CVE-2022-3004YetiForce CRM vulnerable to stored Cross-site Scripting via WorkFlow module
Modified: 11/8/2023
MEDIUM4.8Packagist
GHSA-rjvc-mf7r-ch7r· CVE-2022-2885Cross site scripting in yetiforce/yetiforce-crm
Modified: 11/8/2023
MEDIUM5.3Packagist
GHSA-rp42-c45j-g46x· CVE-2021-4107yetiforcecrm is vulnerable to Cross-site Scripting
Modified: 11/8/2023
MEDIUM4.3Packagist
GHSA-v4cr-m5f8-gxw8· CVE-2021-4092yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF)
Modified: 11/8/2023
MEDIUM5.4Packagist
GHSA-v9fj-h8g6-4w9q· CVE-2022-3002YetiForce CRM vulnerable to stored Cross-site Scripting
Modified: 11/8/2023