Aller au contenu
Se connecter
5.1 Moyenne

CVE-2025-40990 Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of…

Description

Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_bug/create/xxx", affecting to "title" and "description" parameters via POST. This vulnerability could allow a remote attacker to send a specially crafted query to an authenticated user and steal his/her cookie session details.

Produits et versions touchés

Produit Versions touchées Corrigé en
Ekushey CRM 5.0 Pas de correctif indiqué

Autres CVE de Ekushey CRM

Les 3 CVE de Ekushey CRM →
CVE-2025-40991 Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of… 5.1 Moyenne CVE-2025-40989 Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of… 5.1 Moyenne
Suivre cette CVE