CVE-2020-35706: Daybydaycrm Daybyday

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen.

Affected products

• Daybydaycrm Daybyday: version 2.1.0 only

Published 2020-12-25. Last modified 2026-06-17.