Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Energycrm Clear all filters
TI-2025-27113 CVE-2025-40643 · GHSA-rx47-qmx4-g424

Stored Cross-Site Scripting (XSS) in Energy CRM by Status Tracker

Priority LOW 23

Stored Cross-Site Scripting (XSS) vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request to “/crm/create_job_submit.ph…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00207 Published 2025-10-23 No fix listed CWE-79
TI-2025-27110 CVE-2025-40640 · GHSA-7ww2-w9pq-g2x8

Stored Cross-Site Scripting (XSS) in Energy CRM by Status Tracker

Priority LOW 23

Stored Cross-Site Scripting (XSS) vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request to “/crm/create_invoice_submi…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00212 Published 2025-10-10 No fix listed CWE-79
TI-2025-27116 CVE-2025-40646 · GHSA-x85r-96xp-938j

Information disclosure in ViDay

Priority LOW 28

Exposure of sensitive information in Viday.

CVSS 4.0MEDIUM 5.9 Adjacent network No auth User interaction EPSS 0.00179 Published 2025-10-02 No fix listed CWE-200