DA
Product
DaybydayCRM
10
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 3Medium 7Low 0
Watch
Add DaybydayCRM to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-10283 | 6.3 | Jun 1 | Bottelet DaybydayCRM Setting missing authentication Affected: 2.2.0; 2.2.1 |
| CVE-2022-22112 | 5.4 | Jan 13 | DayByDay CRM - Application-Wide Client-Side Template Injection (CSTI) Affected: 1.1 before unspecified |
| CVE-2022-22109 | 5.4 | Jan 5 | DayByDay CRM - Stored Cross-Site Scripting (XSS) in Task Title Affected: 2.2.0 |
| CVE-2026-116008 New | 4.3 | Oct 24 | DaybydayCRM through 2.2.1 Missing Authorization via ProjectsController updateAssign Affected: through 2.2.1 |
| CVE-2026-10282 | 4.3 | Jun 1 | Bottelet DaybydayCRM DocumentsController.php view improper authorization Affected: 2.2.0; 2.2.1 |
| CVE-2022-22108 | 4.3 | Jan 5 | DayByDay CRM - Missing Authorization when Viewing Absences Affected: 2.0.0 before unspecified; through 2.2.0 |
| CVE-2022-22107 | 4.3 | Jan 5 | DayByDay CRM - Missing Authorization when Viewing Appointments Affected: 2.0.0 before unspecified; through 2.2.0 |
Showing 7