CVE-2021-4116

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Score

CVSS 3.0 6.6 Medium

Status

Modified - security@huntr.dev

Published

2021-12-15

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Yetiforce Customer Relationship Management (Yetiforce)
• Yetiforcecompanyyetiforcecrm (Yetiforcecompany)

References

• https://github.com/yetiforcecompany/yetiforcecrm/commit/9cdb012ca64ff1f719f8120d5fd162cd5ef1013f
• https://huntr.dev/bounties/7561bae7-9053-4dc8-aa59-b71acfb1712c