Daybydaycrm Daybyday — known CVE vulnerabilities

Every CVE whose affected-product data names Daybydaycrm Daybyday, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2022-22113 — CVSS 8.8 (high): In DayByDay CRM, versions 2.2.0 through 2.2.1 (latest) are vulnerable to Insufficient Session Expiration. When a password has been changed…
• CVE-2020-35704 — CVSS 5.4 (medium): Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen.
• CVE-2020-35705 — CVSS 5.4 (medium): Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen.
• CVE-2020-35706 — CVSS 5.4 (medium): Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen.
• CVE-2020-35707 — CVSS 5.4 (medium): Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen.
• CVE-2022-22112 — CVSS 5.4 (medium): In DayByDay CRM, versions 1.1 through 2.2.1 (latest) suffer from an application-wide Client-Side Template Injection (CSTI). A low…