[MEDIUM] YetiForce CRM vulnerable to stored Cross-site Scripting via LayoutEditor module

PKSA-t3b1-cwzk-gsps CVE-2022-3000 GHSA-mqh9-5jp9-6799

Affected package: yetiforce/yetiforce-crm

Affected version: <=6.4.0

Reported by:
GitHub