Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

bottelet/flarepoint

5 known vulnerabilities (2 high, 3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 2 high, 3 medium
Registry
Packagist

Advisories 5

  • DayByDay CRM - Missing Authorization when Changing Password

    Affected: fixed in 2.2.1.

  • DayByDay CRM - Weak Password Requirements in Update User

    Affected: from 1.1, fixed in 2.2.1.

  • CVE-2022-22109Medium 5.4

    DayByDay CRM - Stored Cross-Site Scripting (XSS) in Task Title

    Affected: fixed in 2.2.1.

  • CVE-2022-22108Medium 4.3

    DayByDay CRM - Missing Authorization when Viewing Absences

    Affected: from 2.0.0, fixed in 2.2.1.

  • CVE-2022-22107Medium 4.3

    DayByDay CRM - Missing Authorization when Viewing Appointments

    Affected: from 2.0.0, fixed in 2.2.1.