Read the docs

WorkDo

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

WorkDo records in CISA KEV

No WorkDo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Crmgo Saas 2 records MEDIUM Hrm Saas 1 record MEDIUM

Records

7 records

TI-2024-08384 CVE-2024-9031 · GHSA-94g3-94ff-rvhf

CodeCanyon CRMGo SaaS show cross site scripting

Priority MEDIUM 57

A vulnerability, which was classified as problematic, has been found in CodeCanyon CRMGo SaaS up to 7.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0035 Published 2024-09-20 No fix listed CWE-79
TI-2024-08383 CVE-2024-9030 · GHSA-gwmp-w6mx-r484

CodeCanyon CRMGo SaaS note cross site scripting

Priority MEDIUM 57

A vulnerability classified as problematic was found in CodeCanyon CRMGo SaaS 7.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00373 Published 2024-09-20 No fix listed CWE-79
TI-2025-27344 CVE-2025-40978 · GHSA-gpr9-62pw-pr5w

Multiple vulnerabilities in WorkDo products

Priority LOW 23

Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's eCommerceGo SaaS, consisting of a stored XSS due to a lack of proper validation of user input by sending a POST request to ‘/ticket/x/conversion’, using the ‘re…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00273 Published 2026-01-12 No fix listed CWE-79
TI-2025-27343 CVE-2025-40977 · GHSA-gc2x-hm2m-2mfm

Multiple vulnerabilities in WorkDo products

Priority LOW 23

Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's eCommerceGo SaaS, consisting of a lack of proper validation of user input by sending a POST request to ‘/store-ticket’, using the ‘subject’ and ‘description’ pa…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00273 Published 2026-01-12 No fix listed CWE-79
TI-2025-27342 CVE-2025-40976 · GHSA-vx23-6x2j-vfq4

Multiple vulnerabilities in WorkDo products

Priority LOW 23

Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's TicketGo, consisting of a lack of proper validation of user input by sending a POST request to ‘/ticketgo-saas/home’, using the ‘description’ parameter.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00273 Published 2026-01-12 No fix listed CWE-79
TI-2025-27341 CVE-2025-40975 · GHSA-xg52-rc56-qm35

Multiple vulnerabilities in WorkDo products

Priority LOW 23

Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's HRMGo, consisting of a lack of proper validation of user input by sending a POST request to ‘/hrmgo/ticket/changereply’, using the ‘description’ parameter.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00273 Published 2026-01-12 No fix listed CWE-79
Open these records in search →