Vulnerabilities

TI-2026-80518 CVE-2026-116385 · GHSA-vhvh-j58v-j65j

Cross-site scripting in Bdtask Garage 24 profile editing

MEDIUM 56

A security vulnerability has been detected in Bdtask Garage 24 Garage Management Software 1.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00239 Published 2026-10-26 No fix listed CWE-79

TI-2026-80506 CVE-2026-116384 · GHSA-rv22-rcgg-pg8h

Improper authorization in Bdtask Garage 24 garage management software

MEDIUM 57

A weakness has been identified in Bdtask Garage 24 Garage Management Software 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00201 Published 2026-10-26 No fix listed CWE-266

TI-2026-08910 CVE-2026-10172 · GHSA-55rv-vx3h-7mh7

Bdtask Multi-Store Inventory Management System Component Module.php upload unrestricted upload

MEDIUM 57

A security flaw has been discovered in Bdtask Multi-Store Inventory Management System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00206 Published 2026-05-31 No fix listed CWE-284

TI-2026-08893 CVE-2026-10155 · GHSA-xg25-5g7j-67pp

Bdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injection

MEDIUM 56

A vulnerability was found in Bdtask Multi-Store Inventory Management System 1.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00206 Published 2026-05-30 No fix listed CWE-74

TI-2019-15558 CVE-2019-25505 · GHSA-8gmm-qrf9-2w69

Tradebox 5.4 SQL Injection via symbol Parameter

MEDIUM 64

Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00334 Published 2026-03-04 No fix listed CWE-89

TI-2020-19241 CVE-2020-37106 · GHSA-73cm-8qv6-w7j7

Business Live Chat Software 1.0 - Cross-Site Request Forgery (Add Admin)

MEDIUM 62

Business Live Chat Software 1.0 contains a cross-site request forgery vulnerability that allows attackers to change user account roles without authentication.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00201 Published 2026-02-06 No fix listed CWE-352

TI-2026-01287 CVE-2026-1600 · GHSA-r4r4-p63w-fx9j

Bdtask Bhojon All-In-One Restaurant Management System Add-to-Cart Submission Endpoint addtocart logic error

MEDIUM 57

A vulnerability was identified in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00293 Published 2026-01-29 No fix listed CWE-840

TI-2026-01286 CVE-2026-1599 · GHSA-h74p-wq7x-5m6w

Bdtask Bhojon All-In-One Restaurant Management System Checkout placeorder logic error

MEDIUM 57

A vulnerability was determined in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0032 Published 2026-01-29 No fix listed CWE-840

TI-2026-01285 CVE-2026-1598 · GHSA-m49r-chq2-mg29

Bdtask Bhojon All-In-One Restaurant Management System User Information profile cross site scripting

MEDIUM 56

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00246 Published 2026-01-29 No fix listed CWE-79

TI-2026-01284 CVE-2026-1597 · GHSA-4vv9-gf8x-3292

Bdtask SalesERP Administrative Endpoint improper authorization

MEDIUM 57

A vulnerability has been found in Bdtask SalesERP up to 20260116.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00316 Published 2026-01-29 No fix listed CWE-266

TI-2025-27149 CVE-2025-40679 · GHSA-hmmg-cjmw-gj6g

HTML injection in Isshue from Bdtask

LOW 23

HTML Injection vulnerability in Isshue by Bdtask, consisting os an HTML injection due to a lack os proper validation of user input by sending a POST request to '/category_product_search', affecting the 'product_name' par…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00311 Published 2026-01-20 No fix listed CWE-79

TI-2021-22385 CVE-2021-47769 · GHSA-9ghv-qpxv-wccq

Isshue Shopping Cart 3.5 - 'Title' Cross Site Scripting (XSS)

MEDIUM 56

Isshue Shopping Cart 3.5 contains a persistent cross-site scripting vulnerability in title input fields across stock, customer, and invoice modules.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00286 Published 2026-01-15 No fix listed CWE-79

TI-2025-12103 CVE-2025-13239 · GHSA-q252-w8cv-75jr

Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflow

MEDIUM 57

A security vulnerability has been detected in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution 5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00335 Published 2025-11-16 No fix listed CWE-840

TI-2025-12102 CVE-2025-13238 · GHSA-858c-g64p-6mfh

Bdtask Flight Booking Software Edit Profile edit unrestricted upload

MEDIUM 57

A weakness has been identified in Bdtask Flight Booking Software 4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00344 Published 2025-11-16 No fix listed CWE-284

TI-2025-12056 CVE-2025-13186 · GHSA-q2px-2p9g-f9jv

Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution manage_customer cross site scripting

MEDIUM 55

A weakness has been identified in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution up to 4.0.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00291 Published 2025-11-14 No fix listed CWE-79

TI-2025-12055 CVE-2025-13185 · GHSA-h469-4qhx-pwh7

Bdtask/CodeCanyon News365 profile unrestricted upload

MEDIUM 56

A security flaw has been discovered in Bdtask/CodeCanyon News365 up to 7.0.3.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00386 Published 2025-11-14 No fix listed CWE-284

TI-2025-12050 CVE-2025-13180 · GHSA-6gh2-mpgg-5hx9

Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System edit_profile cross site scripting

MEDIUM 56

A vulnerability was found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 20250320.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00254 Published 2025-11-14 No fix listed CWE-74

TI-2025-12049 CVE-2025-13179 · GHSA-p8vc-3r99-j897

Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System cross-site request forgery

MEDIUM 57

A vulnerability has been found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 20250320.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00241 Published 2025-11-14 No fix listed CWE-352

TI-2025-12048 CVE-2025-13178 · GHSA-jgpm-4mcp-wmvj

Bdtask/CodeCanyon SalesERP User Profile edit_profile cross site scripting

MEDIUM 56

A flaw has been found in Bdtask/CodeCanyon SalesERP up to 20250728.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00254 Published 2025-11-14 No fix listed CWE-74

TI-2025-12047 CVE-2025-13177 · GHSA-4gw8-mpvg-cxc6

Bdtask/CodeCanyon SalesERP cross-site request forgery

MEDIUM 57

A vulnerability was detected in Bdtask/CodeCanyon SalesERP up to 20250728.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00267 Published 2025-11-14 No fix listed CWE-352

TI-2025-11271 CVE-2025-12288 · GHSA-4wh7-qf8p-938f

Bdtask Pharmacy Management System User Profile edit_user authorization

MEDIUM 57

A vulnerability was detected in Bdtask Pharmacy Management System up to 9.4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00477 Published 2025-10-27 No fix listed CWE-285

TI-2025-11270 CVE-2025-12287 · GHSA-xrjw-pqg4-p22x

Bdtask Wholesale Inventory Control and Inventory Management System edit_profile sql injection

MEDIUM 58

A security vulnerability has been detected in Bdtask Wholesale Inventory Control and Inventory Management System up to 20251013.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00456 Published 2025-10-27 No fix listed CWE-74

TI-2025-11206 CVE-2025-12223 · GHSA-jgm2-j5pr-pph9

Bdtask Flight Booking Software Package Information package-information unrestricted upload

MEDIUM 57

A vulnerability was detected in Bdtask Flight Booking Software up to 3.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00396 Published 2025-10-27 No fix listed CWE-284

TI-2025-11205 CVE-2025-12222 · GHSA-jvgr-7mgj-9rx2

Bdtask Flight Booking Software Deposit deposit unrestricted upload

MEDIUM 57

A security vulnerability has been detected in Bdtask Flight Booking Software up to 3.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00436 Published 2025-10-27 No fix listed CWE-284

TI-2024-02951 CVE-2024-3151 · GHSA-rgmw-7xj5-7qqv

Bdtask Multi-Store Inventory Management System Stock Movement Page cross-site request forgery

MEDIUM 53

A vulnerability, which was classified as problematic, was found in Bdtask Multi-Store Inventory Management System up to 20240325.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00388 Published 2024-04-02 No fix listed CWE-352

Vulnerabilities

Filters