Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: WorkDo Clear all filters
TI-2025-27344 CVE-2025-40978 · GHSA-gpr9-62pw-pr5w

Multiple vulnerabilities in WorkDo products

Priority LOW 23

Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's eCommerceGo SaaS, consisting of a stored XSS due to a lack of proper validation of user input by sending a POST request to ‘/ticket/x/conversion’, using the ‘re…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00273 Published 2026-01-12 No fix listed CWE-79
TI-2025-27343 CVE-2025-40977 · GHSA-gc2x-hm2m-2mfm

Multiple vulnerabilities in WorkDo products

Priority LOW 23

Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's eCommerceGo SaaS, consisting of a lack of proper validation of user input by sending a POST request to ‘/store-ticket’, using the ‘subject’ and ‘description’ pa…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00273 Published 2026-01-12 No fix listed CWE-79
TI-2025-27342 CVE-2025-40976 · GHSA-vx23-6x2j-vfq4

Multiple vulnerabilities in WorkDo products

Priority LOW 23

Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's TicketGo, consisting of a lack of proper validation of user input by sending a POST request to ‘/ticketgo-saas/home’, using the ‘description’ parameter.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00273 Published 2026-01-12 No fix listed CWE-79
TI-2025-27341 CVE-2025-40975 · GHSA-xg52-rc56-qm35

Multiple vulnerabilities in WorkDo products

Priority LOW 23

Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's HRMGo, consisting of a lack of proper validation of user input by sending a POST request to ‘/hrmgo/ticket/changereply’, using the ‘description’ parameter.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00273 Published 2026-01-12 No fix listed CWE-79
TI-2024-08384 CVE-2024-9031 · GHSA-94g3-94ff-rvhf

CodeCanyon CRMGo SaaS show cross site scripting

Priority MEDIUM 57

A vulnerability, which was classified as problematic, has been found in CodeCanyon CRMGo SaaS up to 7.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0035 Published 2024-09-20 No fix listed CWE-79
TI-2024-08383 CVE-2024-9030 · GHSA-gwmp-w6mx-r484

CodeCanyon CRMGo SaaS note cross site scripting

Priority MEDIUM 57

A vulnerability classified as problematic was found in CodeCanyon CRMGo SaaS 7.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00373 Published 2024-09-20 No fix listed CWE-79