CVE-2020-35705: Daybydaycrm Daybyday

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen.

Affected products

• Daybydaycrm Daybyday: version 2.1.0 only

Published 2020-12-25. Last modified 2026-06-17.