Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Creativeitem Component: Ekushey Project Manager Crm Clear all filters
TI-2025-27351 CVE-2025-40991 · GHSA-vcmf-x83r-j6x3

Stored XSS in Creativeitem Ekushey CRM

Priority LOW 23

Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_file/upload/xxxx", affecting to "description" para…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00212 Published 2025-10-02 No fix listed CWE-79
TI-2025-27350 CVE-2025-40990 · GHSA-8jrv-4gmj-4x7h

Stored XSS in Creativeitem Ekushey CRM

Priority LOW 23

Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_bug/create/xxx", affecting to "title" and "descrip…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00212 Published 2025-10-02 No fix listed CWE-79
TI-2025-27349 CVE-2025-40989 · GHSA-38m7-3q3q-x4xv

Stored XSS in Creativeitem Ekushey CRM

Priority LOW 23

Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_message/add/xxx", affecting to "message" parameter…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00212 Published 2025-10-02 No fix listed CWE-79