Approved changes feed: RSS · Atom
cpe:2.3:a:daybydaycrm:daybyday:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Daybydaycrm (96d59825-6420-5007-9a9d-9ca54c2ee80e) |
|---|---|
| Product | Daybyday (9f773d92-bb65-58e6-bee5-7942670d8c60) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/bottelet/daybydaycrm |
purl2cpe | 2026-06-01 10:12:41.255492 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-22113 |
vulnerable | 2026-06-08 05:40:05.912847 |
DayByDay CRM - Insufficient Session Expiration after Password Change
HIGH (8.8)
In DayByDay CRM, versions 2.2.0 through 2.2.1 (latest) are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even after the password was changed.
Published: 2022-01-13T08:35:13.633Z
Updated: 2024-09-17T02:31:21.087Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22112 |
vulnerable | 2026-06-08 05:40:05.912358 |
DayByDay CRM - Application-Wide Client-Side Template Injection (CSTI)
MEDIUM (5.4)
In DayByDay CRM, versions 1.1 through 2.2.1 (latest) suffer from an application-wide Client-Side Template Injection (CSTI). A low privileged attacker can input template injection payloads in the application at various locations to execute JavaScript on the client browser.
Published: 2022-01-13T08:35:12.079Z
Updated: 2024-09-16T23:35:56.740Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.