CVE-2020-35704

MEDIUM WAF: High
CVSS 5.4 Published: 2020-12-25
CWE-79

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen.

WAF Coverage Analysis

Cross-Site Scripting (XSS) High WAF Coverage

OWASP: A03:2021 Injection

941xxx - XSS / XXE

Affected Software

VendorProductVersion
daybydaycrmdaybyday2.1.0

References

Back to CVE Database