Miggo Logo
Miggo Vulnerability Database
→
CVE-2022-1340

CVE-2022-1340: Cross site scripting in yetiforce/yetiforce-crm

5.4

CVSS Score
3.1

Basic Information

CVE ID
CVE-2022-1340
GHSA ID
GHSA-w83m-rghh-frxj
EPSS Score
0.27438%
CWE
CWE-79
Published
8/23/2022
Updated
1/28/2023
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
yetiforce/yetiforce-crmcomposer< 6.4.06.4.0

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

*ross-sit* S*riptin* (XSS) - Stor** in *it*u* r*pository y*ti*or***omp*ny/y*ti*or***rm prior to *.*.*.

Reasoning

No *n*lysis *v*il**l*