Description

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

Remediation

References

CVE-2022-3000

Related Vulnerabilities

WordPress Plugin Share, Print and PDF Products for WooCommerce Security Bypass (2.7.2)

WordPress Plugin NextMove Lite-Thank You Page for WooCommerce Security Bypass (2.17.0)

axios Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') Vulnerability (CVE-2026-44489)

WordPress Plugin WP-Forum Multiple SQL Injection Vulnerabilities (1.7.8)

Oracle Application Server CVE-2006-0284 Vulnerability (CVE-2006-0284)

Severity

Medium

Classification

CVE-2022-3000 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities