Advisories · Technology
Bottelet DaybydayCRM.
Every CVE that names Bottelet DaybydayCRM among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
DaybydayCRM through 2.2.1 Missing Authorization via ProjectsController updateAssign
- Bottelet DaybydayCRM
- Broken access control
- CVSS 5.3 Medium
Bottelet DaybydayCRM Setting missing authentication
- Bottelet DaybydayCRM
- Authentication bypass
- CVSS 5.3 Medium
Bottelet DaybydayCRM DocumentsController.php view improper authorization
- Bottelet DaybydayCRM
- Privilege escalation
- Broken access control
- CVSS 8.8 High
DayByDay CRM - Insufficient Session Expiration after Password Change
- Bottelet DaybydayCRM
- Authentication bypass
- CVSS 5.4 Medium
DayByDay CRM - Application-Wide Client-Side Template Injection (CSTI)
- Bottelet DaybydayCRM
- Cross-site scripting (XSS)