DA
Vendor
Daybydaycrm
11
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-22113 | DA Daybyday Daybydaycrm | 8.8 | Jan 13 | DayByDay CRM - Insufficient Session Expiration after Password Change |
| CVE-2022-22112 | DA Daybyday Daybydaycrm | 5.4 | Jan 13 | DayByDay CRM - Application-Wide Client-Side Template Injection (CSTI) |
| CVE-2022-22111 | DC Daybyday Crm Daybydaycrm | 8.8 | Jan 5 | DayByDay CRM - Missing Authorization when Changing Password |
| CVE-2022-22110 | DC Daybyday Crm Daybydaycrm | 7.5 | Jan 5 | DayByDay CRM - Weak Password Requirements in Update User |
| CVE-2022-22109 | DC Daybyday Crm Daybydaycrm | 5.4 | Jan 5 | DayByDay CRM - Stored Cross-Site Scripting (XSS) in Task Title |
| CVE-2022-22108 | DC Daybyday Crm Daybydaycrm | 4.3 | Jan 5 | DayByDay CRM - Missing Authorization when Viewing Absences |
| CVE-2022-22107 | DC Daybyday Crm Daybydaycrm | 4.3 | Jan 5 | DayByDay CRM - Missing Authorization when Viewing Appointments |
| CVE-2020-35704 | DA Daybyday Daybydaycrm | 5.4 | Dec 25 | Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen |
| CVE-2020-35705 | DA Daybyday Daybydaycrm | 5.4 | Dec 25 | Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen |
| CVE-2020-35706 | DA Daybyday Daybydaycrm | 5.4 | Dec 25 | Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen |
| CVE-2020-35707 | DA Daybyday Daybydaycrm | 5.4 | Dec 25 | Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen |