VDB
Sign up
MEDIUM5.4

GHSA-w83m-rghh-frxj

Cross site scripting in yetiforce/yetiforce-crm

Quick fix

GHSA-w83m-rghh-frxj — yetiforce/yetiforce-crm: upgrade to the fixed version with the command below.

composer require yetiforce/yetiforce-crm:^6.4.0

Details

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/yetiforce/yetiforce-crm
Introduced in: 0Fixed in: 6.4.0
Fixcomposer require yetiforce/yetiforce-crm:^6.4.0

References