[yetiforce/yetiforce-crm] YetiForce CRM vulnerable to stored Cross-site Scripting via SlaPolicy module

YetiForce CRM versions 6.4.0 and prior are vulnerable to cross-site scripting via the SlaPolicy module. A patch is available at commit e55886781509fe39951fc7528347696474a17884.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-3005
• https://github.com/yetiforcecompany/yetiforcecrm/commit/e55886781509fe39951fc7528347696474a17884
• https://huntr.dev/bounties/4b144433-a979-4c4e-a627-659838acc217
• https://github.com/advisories/GHSA-vx3x-hwph-grvw