Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2026/03/26 3:15 p.m.•16 views

CVE-2026-4165

A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS4AI score0.00338EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/16 3:30 p.m.•13 views

EUVD-2026-12207

A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS3.9AI score0.00338EPSS
SaveExploits0References4
NVD
NVD
•added 2026/03/16 2:19 p.m.•18 views

CVE-2026-4165

A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS0.00338EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/16 12:00 a.m.•2 views

CVE-2026-4165: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS3.8AI score0.00338EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/15 5:02 a.m.•7 views

CVE-2026-4165

A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS3.9AI score0.00338EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2026/03/15 5:02 a.m.•56 views

CVE-2026-4165 Worksuite HR, CRM and Project Management create cross site scripting

A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS0.00338EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/03/15 12:00 a.m.•16 views

PT-2026-25539

A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS3.9AI score0.00338EPSS
SaveExploits0References7
Rows per page
Query Builder