https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T12:16:26.227421+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-68549 cnvd-2022-68549 2026-10-09T12:16:26.294462+00:00 cnvd-2022-68549 https://cve.radiocsirt.org/vuln/euvd-2026-13350 EUVD-2026-13350 2026-10-09T12:16:26.294510+00:00 EUVD-2026-13350 https://cve.radiocsirt.org/vuln/fkie_cve-2022-22109 fkie_cve-2022-22109 2026-10-09T12:16:26.294525+00:00

In Daybyday CRM, version 2.2.0 is vulnerable to Stored Cross-Site Scripting (XSS) vulnerability that allows low privileged application users to store malicious scripts in the title field of new tasks. These scripts are executed in a victim’s browser when they open the “/tasks” page to view all the tasks.

 https://cve.radiocsirt.org/vuln/ghsa-jr37-66pj-36v7 GHSA-jr37-66pj-36v7 — Cross-site Scripting in DayByDay CRM 2026-10-09T12:16:26.294558+00:00

Affected: Packagist: bottelet/flarepoint

In Daybyday CRM, version 2.2.0 is vulnerable to Stored Cross-Site Scripting (XSS) vulnerability that allows low privileged application users to store malicious scripts in the title field of new tasks. These scripts are executed in a victim’s browser when they open the “/tasks” page to view all the tasks.

 https://cve.radiocsirt.org/vuln/gsd-2022-22109 gsd-2022-22109 2026-10-09T12:16:26.294583+00:00 gsd-2022-22109