https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T22:39:19.512265+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-22112 CVE-2022-22112 — DayByDay CRM - Application-Wide Client-Side Template Injection (CSTI) 2026-10-09T22:39:19.514026+00:00

Affected: Bottelet DaybydayCRM

In DayByDay CRM, versions 1.1 through 2.2.1 (latest) suffer from an application-wide Client-Side Template Injection (CSTI). A low privileged attacker can input template injection payloads in the application at various locations to execute JavaScript on the client browser.