Vulnerabilities

TI-2026-65316 CVE-2026-102290 · GHSA-pr39-2p6v-p39j

CodeCanyon Rocket LMS Student Profile Image Upload cross site scripting

MEDIUM 56

A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00249 Published 2026-09-29 No fix listed CWE-79

TI-2026-16187 CVE-2026-19966 · GHSA-j847-pxxw-4m9g

CodeCanyon TimeCamp Integration for CRM Contact Information Update save_contact authorization

MEDIUM 57

A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00405 Published 2026-08-17 No fix listed CWE-285

TI-2026-06854 CVE-2026-7783 · GHSA-8636-gx6g-wh63

CodeCanyon Perfex CRM Admin Kanban Endpoint AbstractKanban.php applySortQuery sql injection

MEDIUM 57

A flaw has been found in CodeCanyon Perfex CRM up to 3.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00241 Published 2026-05-04 No fix listed CWE-74

TI-2026-06853 CVE-2026-7782 · GHSA-jqqg-v7qj-c3jq

CodeCanyon Perfex CRM Tenant Clients.php project authorization

MEDIUM 57

A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00211 Published 2026-05-04 No fix listed CWE-285

TI-2025-12103 CVE-2025-13239 · GHSA-q252-w8cv-75jr

Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflow

MEDIUM 57

A security vulnerability has been detected in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution 5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00335 Published 2025-11-16 No fix listed CWE-840

TI-2025-12056 CVE-2025-13186 · GHSA-q2px-2p9g-f9jv

Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution manage_customer cross site scripting

MEDIUM 55

A weakness has been identified in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution up to 4.0.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00291 Published 2025-11-14 No fix listed CWE-79

TI-2025-12055 CVE-2025-13185 · GHSA-h469-4qhx-pwh7

Bdtask/CodeCanyon News365 profile unrestricted upload

MEDIUM 56

A security flaw has been discovered in Bdtask/CodeCanyon News365 up to 7.0.3.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00386 Published 2025-11-14 No fix listed CWE-284

TI-2025-12050 CVE-2025-13180 · GHSA-6gh2-mpgg-5hx9

Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System edit_profile cross site scripting

MEDIUM 56

A vulnerability was found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 20250320.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00254 Published 2025-11-14 No fix listed CWE-74

TI-2025-12049 CVE-2025-13179 · GHSA-p8vc-3r99-j897

Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System cross-site request forgery

MEDIUM 57

A vulnerability has been found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 20250320.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00241 Published 2025-11-14 No fix listed CWE-352

TI-2025-12048 CVE-2025-13178 · GHSA-jgpm-4mcp-wmvj

Bdtask/CodeCanyon SalesERP User Profile edit_profile cross site scripting

MEDIUM 56

A flaw has been found in Bdtask/CodeCanyon SalesERP up to 20250728.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00254 Published 2025-11-14 No fix listed CWE-74

TI-2025-12047 CVE-2025-13177 · GHSA-4gw8-mpvg-cxc6

Bdtask/CodeCanyon SalesERP cross-site request forgery

MEDIUM 57

A vulnerability was detected in Bdtask/CodeCanyon SalesERP up to 20250728.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00267 Published 2025-11-14 No fix listed CWE-352

TI-2025-10352 CVE-2025-11304 · GHSA-jw8p-752q-4f34

CodeCanyon/ui-lib Mentor LMS API cross-domain policy

MEDIUM 57

A flaw has been found in CodeCanyon/ui-lib Mentor LMS up to 1.1.1.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00218 Published 2025-10-05 No fix listed CWE-346

TI-2025-07222 CVE-2025-7898 · GHSA-54pj-89cm-m6fv

Codecanyon iDentSoft Account Setting Page updateSetting unrestricted upload

MEDIUM 56

A vulnerability was found in Codecanyon iDentSoft 2.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00492 Published 2025-07-20 No fix listed CWE-284

TI-2025-03404 CVE-2025-3855 · GHSA-jvr7-6jv9-x5c8

CodeCanyon RISE Ultimate Project Manager Profile Picture save_profile_image resource injection

MEDIUM 57

A vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as problematic.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00489 Published 2025-04-22 No fix listed CWE-99

TI-2025-02818 CVE-2025-3219 · GHSA-w9gj-5xc3-fv5w

CodeCanyon Perfex CRM Project Discussions Module 2 cross site scripting

MEDIUM 56

A vulnerability was found in CodeCanyon Perfex CRM 3.2.1.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00398 Published 2025-04-04 No fix listed CWE-79

TI-2025-02589 CVE-2025-2974 · GHSA-84wr-h4hf-228g

CodeCanyon Perfex CRM Contracts contract cross site scripting

MEDIUM 56

A vulnerability has been found in CodeCanyon Perfex CRM up to 3.2.1 and classified as problematic.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00378 Published 2025-03-31 No fix listed CWE-79

TI-2024-08384 CVE-2024-9031 · GHSA-94g3-94ff-rvhf

CodeCanyon CRMGo SaaS show cross site scripting

MEDIUM 57

A vulnerability, which was classified as problematic, has been found in CodeCanyon CRMGo SaaS up to 7.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0035 Published 2024-09-20 No fix listed CWE-79

TI-2024-08383 CVE-2024-9030 · GHSA-gwmp-w6mx-r484

CodeCanyon CRMGo SaaS note cross site scripting

MEDIUM 57

A vulnerability classified as problematic was found in CodeCanyon CRMGo SaaS 7.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00373 Published 2024-09-20 No fix listed CWE-79

TI-2024-08305 CVE-2024-8945 · GHSA-hf3h-f7qm-mhc4

CodeCanyon RISE Ultimate Project Manager save sql injection

MEDIUM 57

A vulnerability has been found in CodeCanyon RISE Ultimate Project Manager 3.7.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.15965 Published 2024-09-17 No fix listed CWE-89

TI-2024-00503 CVE-2024-0545 · GHSA-3975-4fwf-j526

CodeCanyon RISE Ultimate Project Manager signin redirect

LOW 37

A vulnerability classified as problematic was found in CodeCanyon RISE Ultimate Project Manager 3.5.3.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0048 Published 2024-01-15 No fix listed CWE-601

TI-2023-04069 CVE-2023-4407 · GHSA-7q3f-vpx9-359h

Codecanyon Credit Lite POST Request account_statement sql injection

MEDIUM 46

A vulnerability classified as critical was found in Codecanyon Credit Lite 1.5.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01987 Published 2023-08-18 No fix listed CWE-89

TI-2023-03538 CVE-2023-3787 · GHSA-fcg2-cmq2-9724

Codecanyon Tiva Events Calender cross site scripting

MEDIUM 58

A vulnerability classified as problematic was found in Codecanyon Tiva Events Calender 1.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00619 Published 2023-07-20 No fix listed CWE-79

TI-2014-07305 CVE-2014-8954 · GHSA-q97h-mjwh-c25x

Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Description fields in a playlist or the (3) filter parameter in…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03217 Published 2014-11-17 No fix listed CWE-79

Vulnerabilities

Filters