Ekushey Project Manager Crm

ekushey_project_manager_crm

Vendor: Creativeitem • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-40991 1Creativeitem 1Ekushey Project Manager Crm Jun 17, 2026 Oct 2, 2025 5.1 MEDIUM· v4 5.4 MEDIUM· v3 N/A· v2 Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_file/upload/xxxx", affecting to "description" para...Show more Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_file/upload/xxxx", affecting to "description" parameter via POST. This vulnerability could allow a remote attacker to send a specially crafted query to an authenticated user and steal his/her cookie session details.Show less
CVE-2025-40990 1Creativeitem 1Ekushey Project Manager Crm Jun 17, 2026 Oct 2, 2025 5.1 MEDIUM· v4 5.4 MEDIUM· v3 N/A· v2 Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_bug/create/xxx", affecting to "title" and "descrip...Show more Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_bug/create/xxx", affecting to "title" and "description" parameters via POST. This vulnerability could allow a remote attacker to send a specially crafted query to an authenticated user and steal his/her cookie session details.Show less
CVE-2025-40989 1Creativeitem 1Ekushey Project Manager Crm Jun 17, 2026 Oct 2, 2025 5.1 MEDIUM· v4 5.4 MEDIUM· v3 N/A· v2 Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_message/add/xxx", affecting to "message" parameter...Show more Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_message/add/xxx", affecting to "message" parameter via POST. This vulnerability could allow a remote attacker to send a specially crafted query to an authenticated user and steal his/her cookie session details.Show less