[MEDIUM] YetiForce CRM vulnerable to stored Cross-site Scripting via SlaPolicy module

PKSA-yfhz-fhkc-j9kz CVE-2022-3005 GHSA-vx3x-hwph-grvw

Affected package: yetiforce/yetiforce-crm

Affected version: <=6.4.0

Reported by:
GitHub