Security Advisory
CVE-2022-22112
5.4
MEDIUM
Vulnerability Description
In DayByDay CRM, versions 1.1 through 2.2.1 (latest) suffer from an application-wide Client-Side Template Injection (CSTI). A low privileged attacker can input template injection payloads in the application at various locations to execute JavaScript on the client browser.
Published Date
January 13, 2022
Official Source
NIST NVD Advisory