Packagist/bottelet/flarepoint CVE-2022-22109: medium 5.4, EPSS 0.55%

Cross-site Scripting in DayByDay CRM

Action: Upgrade bottelet/flarepoint to 2.2.1 or later.

composer require bottelet/flarepoint:2.2.1

Affected

Fixed versions

Sources

• osv: GHSA-jr37-66pj-36v7
• https://nvd.nist.gov/vuln/detail/CVE-2022-22109
• https://github.com/Bottelet/DaybydayCRM/commit/002dc75f400cf307bd00b71a5a93f1e26e52cee2
• https://github.com/Bottelet/DaybydayCRM
• https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-22109

CVE-2022-22109 · published 2022-01-08T00:32:00Z · modified 2023-11-08T04:08:11.549055Z · JSON