Vulnerabilities

TI-2026-62330 CVE-2026-92418 · GHSA-83j3-x93q-5c35

ChangeWeDer crm Save Endpoint customer.serve.js cross site scripting

MEDIUM 56

A vulnerability was determined in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00348 Published 2026-09-16 No fix listed CWE-79

TI-2026-62319 CVE-2026-92402 · GHSA-6c3f-32hf-fq4p

LOW 24

A security flaw has been discovered in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-09-16 No fix listed CWE-862

TI-2026-62318 CVE-2026-92401 · GHSA-8qh7-2pvf-hvqc

LOW 38

A vulnerability was identified in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00686 Published 2026-09-16 No fix listed CWE-287