Read the docs

Creativeitem

Records34All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Creativeitem records in CISA KEV

No Creativeitem vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Academy Lms 16 records HIGH Ekushey Project Manager Crm 3 records LOW Atlas 2 records LOW Ekushey Project Manager 2 records LOW Academy Learning Management System 1 record MEDIUM Mastery Lms 1 record LOW Neoflex Video Subscription System 1 record LOW

Records

3 records in Ekushey Project Manager Crm · all components

TI-2025-27351 CVE-2025-40991 · GHSA-vcmf-x83r-j6x3

Stored XSS in Creativeitem Ekushey CRM

Priority LOW 23

Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_file/upload/xxxx", affecting to "description" para…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00212 Published 2025-10-02 No fix listed CWE-79
TI-2025-27350 CVE-2025-40990 · GHSA-8jrv-4gmj-4x7h

Stored XSS in Creativeitem Ekushey CRM

Priority LOW 23

Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_bug/create/xxx", affecting to "title" and "descrip…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00212 Published 2025-10-02 No fix listed CWE-79
TI-2025-27349 CVE-2025-40989 · GHSA-38m7-3q3q-x4xv

Stored XSS in Creativeitem Ekushey CRM

Priority LOW 23

Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_message/add/xxx", affecting to "message" parameter…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00212 Published 2025-10-02 No fix listed CWE-79
Open these records in search →