CVE-2022-22112

CVE-2022-22112

In DayByDay CRM, versions 1.1 through 2.2.1 (latest) suffer from an application-wide Client-Side Template Injection (CSTI). A low privileged attacker can input template injection payloads in the application at various locations to execute JavaScript on the client browser.

Source: CVE-2022-22112

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다