TI-2023-03538 CVE-2023-3787 · GHSA-fcg2-cmq2-9724
Codecanyon Tiva Events Calender cross site scripting
Priority MEDIUM 58
A vulnerability classified as problematic was found in Codecanyon Tiva Events Calender 1.4.
CodeCanyon
Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
CodeCanyon records in CISA KEVNo CodeCanyon vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
23 records
TI-2026-16187 CVE-2026-19966 · GHSA-j847-pxxw-4m9g
CodeCanyon TimeCamp Integration for CRM Contact Information Update save_contact authorization
Priority MEDIUM 57
A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8.
TI-2026-06854 CVE-2026-7783 · GHSA-8636-gx6g-wh63
CodeCanyon Perfex CRM Admin Kanban Endpoint AbstractKanban.php applySortQuery sql injection
Priority MEDIUM 57
A flaw has been found in CodeCanyon Perfex CRM up to 3.4.1.
TI-2026-06853 CVE-2026-7782 · GHSA-jqqg-v7qj-c3jq
CodeCanyon Perfex CRM Tenant Clients.php project authorization
Priority MEDIUM 57
A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1.
TI-2025-12103 CVE-2025-13239 · GHSA-q252-w8cv-75jr
Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflow
Priority MEDIUM 57
A security vulnerability has been detected in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution 5.
TI-2025-12049 CVE-2025-13179 · GHSA-p8vc-3r99-j897
Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System cross-site request forgery
Priority MEDIUM 57
A vulnerability has been found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 20250320.
TI-2025-12047 CVE-2025-13177 · GHSA-4gw8-mpvg-cxc6
Bdtask/CodeCanyon SalesERP cross-site request forgery
Priority MEDIUM 57
A vulnerability was detected in Bdtask/CodeCanyon SalesERP up to 20250728.
TI-2025-10352 CVE-2025-11304 · GHSA-jw8p-752q-4f34
CodeCanyon/ui-lib Mentor LMS API cross-domain policy
Priority MEDIUM 57
A flaw has been found in CodeCanyon/ui-lib Mentor LMS up to 1.1.1.
TI-2025-03404 CVE-2025-3855 · GHSA-jvr7-6jv9-x5c8
CodeCanyon RISE Ultimate Project Manager Profile Picture save_profile_image resource injection
Priority MEDIUM 57
A vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as problematic.
TI-2024-08384 CVE-2024-9031 · GHSA-94g3-94ff-rvhf
CodeCanyon CRMGo SaaS show cross site scripting
Priority MEDIUM 57
A vulnerability, which was classified as problematic, has been found in CodeCanyon CRMGo SaaS up to 7.2.
TI-2024-08383 CVE-2024-9030 · GHSA-gwmp-w6mx-r484
CodeCanyon CRMGo SaaS note cross site scripting
Priority MEDIUM 57
A vulnerability classified as problematic was found in CodeCanyon CRMGo SaaS 7.2.
TI-2024-08305 CVE-2024-8945 · GHSA-hf3h-f7qm-mhc4
CodeCanyon RISE Ultimate Project Manager save sql injection
Priority MEDIUM 57
A vulnerability has been found in CodeCanyon RISE Ultimate Project Manager 3.7.0 and classified as critical.
TI-2026-65316 CVE-2026-102290 · GHSA-pr39-2p6v-p39j
CodeCanyon Rocket LMS Student Profile Image Upload cross site scripting
Priority MEDIUM 56
A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2.
TI-2025-12055 CVE-2025-13185 · GHSA-h469-4qhx-pwh7
Bdtask/CodeCanyon News365 profile unrestricted upload
Priority MEDIUM 56
A security flaw has been discovered in Bdtask/CodeCanyon News365 up to 7.0.3.
TI-2025-12050 CVE-2025-13180 · GHSA-6gh2-mpgg-5hx9
Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System edit_profile cross site scripting
Priority MEDIUM 56
A vulnerability was found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 20250320.
TI-2025-12048 CVE-2025-13178 · GHSA-jgpm-4mcp-wmvj
Bdtask/CodeCanyon SalesERP User Profile edit_profile cross site scripting
Priority MEDIUM 56
A flaw has been found in Bdtask/CodeCanyon SalesERP up to 20250728.
TI-2025-07222 CVE-2025-7898 · GHSA-54pj-89cm-m6fv
Codecanyon iDentSoft Account Setting Page updateSetting unrestricted upload
Priority MEDIUM 56
A vulnerability was found in Codecanyon iDentSoft 2.0.
TI-2025-02818 CVE-2025-3219 · GHSA-w9gj-5xc3-fv5w
CodeCanyon Perfex CRM Project Discussions Module 2 cross site scripting
Priority MEDIUM 56
A vulnerability was found in CodeCanyon Perfex CRM 3.2.1.
TI-2025-02589 CVE-2025-2974 · GHSA-84wr-h4hf-228g
CodeCanyon Perfex CRM Contracts contract cross site scripting
Priority MEDIUM 56
A vulnerability has been found in CodeCanyon Perfex CRM up to 3.2.1 and classified as problematic.
TI-2025-12056 CVE-2025-13186 · GHSA-q2px-2p9g-f9jv
Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution manage_customer cross site scripting
Priority MEDIUM 55
A weakness has been identified in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution up to 4.0.
TI-2023-04069 CVE-2023-4407 · GHSA-7q3f-vpx9-359h
Codecanyon Credit Lite POST Request account_statement sql injection
Priority MEDIUM 46
A vulnerability classified as critical was found in Codecanyon Credit Lite 1.5.4.
TI-2024-00503 CVE-2024-0545 · GHSA-3975-4fwf-j526
CodeCanyon RISE Ultimate Project Manager signin redirect
Priority LOW 37
A vulnerability classified as problematic was found in CodeCanyon RISE Ultimate Project Manager 3.5.3.
TI-2014-07305 CVE-2014-8954 · GHSA-q97h-mjwh-c25x
Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote…
Priority LOW 26
Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Description fields in a playlist or the (3) filter parameter in…