Bottelet vulnerabilities

CVEs per yearBy the year they were published

1. 20227
2. 20263

Newest CVEs

• CVE-2026-116008

  DaybydayCRM through 2.2.1 Missing Authorization via ProjectsController updateAssign

  Bottelet · DaybydayCRM

  Medium5.3
• CVE-2026-10283

  Bottelet DaybydayCRM Setting missing authentication

  Bottelet · DaybydayCRM

  Medium5.3
• CVE-2026-10282

  Bottelet DaybydayCRM DocumentsController.php view improper authorization

  Bottelet · DaybydayCRM

  Medium5.3
• CVE-2022-22113

  DayByDay CRM - Insufficient Session Expiration after Password Change

  Bottelet · DaybydayCRM

  High8.8
• CVE-2022-22112

  DayByDay CRM - Application-Wide Client-Side Template Injection (CSTI)

  Bottelet · DaybydayCRM

  Medium5.4
• CVE-2022-22111

  DayByDay CRM - Missing Authorization when Changing Password

  Bottelet · DaybydayCRM

  High8.8
• CVE-2022-22110

  DayByDay CRM - Weak Password Requirements in Update User

  Bottelet · DaybydayCRM

  High7.5
• CVE-2022-22109

  DayByDay CRM - Stored Cross-Site Scripting (XSS) in Task Title

  Bottelet · DaybydayCRM

  Medium5.4
• CVE-2022-22108

  DayByDay CRM - Missing Authorization when Viewing Absences

  Bottelet · DaybydayCRM

  Medium4.3
• CVE-2022-22107

  DayByDay CRM - Missing Authorization when Viewing Appointments

  Bottelet · DaybydayCRM

  Medium4.3