[MEDIUM] YetiForce CRM vulnerable to stored Cross-site Scripting

PKSA-1mjy-38h5-my7f CVE-2022-3002 GHSA-v9fj-h8g6-4w9q

Affected package: yetiforce/yetiforce-crm

Affected version: <=6.4.0

Reported by:
GitHub