Description Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Remediation References CVE-2022-1340 Related Vulnerabilities WordPress Plugin Really Simple Guest Post Local File Inclusion (1.0.6) TYPO3 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression La Vulnerability (CVE-2022-23504) WordPress 2.0.5 Cross-Site Scripting Vulnerability (0.6.2 - 2.0.5) SharePoint CVE-2020-1446 Vulnerability (CVE-2020-1446) Python Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2007-4559) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-707 CVE-2022-1340