BBottelet

Products

Exploited and recent CVEs

• CVE-2026-116008 Medium 4.3 DaybydayCRM through 2.2.1 Missing Authorization via ProjectsController updateAssign 0.2%
• CVE-2026-10283 Medium 6.3 Bottelet DaybydayCRM Setting missing authentication 0.3%
• CVE-2026-10282 Medium 4.3 Bottelet DaybydayCRM DocumentsController.php view improper authorization 0.2%
• CVE-2022-22113 High 8.8 DayByDay CRM - Insufficient Session Expiration after Password Change 1.1%
• CVE-2022-22112 Medium 5.4 DayByDay CRM - Application-Wide Client-Side Template Injection (CSTI) 0.6%
• CVE-2022-22111 High 8.8 DayByDay CRM - Missing Authorization when Changing Password 1.0%
• CVE-2022-22111 High 8.8 DayByDay CRM - Missing Authorization when Changing Password 1.0%
• CVE-2022-22110 High 7.5 DayByDay CRM - Weak Password Requirements in Update User 1.2%
• CVE-2022-22110 High 7.5 DayByDay CRM - Weak Password Requirements in Update User 1.2%
• CVE-2022-22109 Medium 5.4 DayByDay CRM - Stored Cross-Site Scripting (XSS) in Task Title 0.5%
• CVE-2022-22109 Medium 5.4 DayByDay CRM - Stored Cross-Site Scripting (XSS) in Task Title 0.5%
• CVE-2022-22108 Medium 4.3 DayByDay CRM - Missing Authorization when Viewing Absences 0.7%
• CVE-2022-22108 Medium 4.3 DayByDay CRM - Missing Authorization when Viewing Absences 0.7%
• CVE-2022-22107 Medium 4.3 DayByDay CRM - Missing Authorization when Viewing Appointments 0.7%
• CVE-2022-22107 Medium 4.3 DayByDay CRM - Missing Authorization when Viewing Appointments 0.7%