CVE-2020-35704: XSS
Published Dec 25, 2020
·Updated
Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen.
Affected Software
1 affected component
Daybydaycrm Daybyday=2.1.0
Event History
Dec 25, 2020
CVE Published
via MITRE·05:24 AM
Data Sourced
via MITRE·05:24 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID of the Daybyday 2.1.0 vulnerability?
The vulnerability ID of the Daybyday 2.1.0 vulnerability is CVE-2020-35704.
2
What is the severity of CVE-2020-35704?
The severity of CVE-2020-35704 is medium with a severity value of 5.4.
3
How does Daybyday 2.1.0 allow stored XSS?
Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen.
4
What is the affected software for CVE-2020-35704?
The affected software for CVE-2020-35704 is Daybyday 2.1.0.
5
How can I fix the Daybyday 2.1.0 stored XSS vulnerability?
To fix the Daybyday 2.1.0 stored XSS vulnerability, update to a version that includes a patch for this vulnerability.