Lucene search
+L

4 matches found

attackerkb
attackerkb
•added 2026/07/27 6:06 p.m.•9 views

CVE-2026-66030

Ekushey Project Manager CRM through version 5.0 ccontains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the Ticket Title field on the Create New Ticket page. Attackers can craft and...

5.4CVSS6AI score0.00289EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/07/27 6:06 p.m.•47 views

CVE-2026-66030 Ekushey Project Manager CRM 5.0 Stored XSS via Ticket Title Field

Ekushey Project Manager CRM through version 5.0 ccontains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the Ticket Title field on the Create New Ticket page. Attackers can craft and...

5.4CVSS0.00289EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/07/27 6:06 p.m.•18 views

EUVD-2026-49395

Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the Ticket Title field on the Create New Ticket page. Attackers can craft and sto...

5.4CVSS6AI score0.00289EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/27 12:00 a.m.•2 views

CVE-2026-66030: Improper Neutralization of Input During Web Page Generation

Ekushey Project Manager CRM through version 5.0 ccontains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the Ticket Title field on the Create New Ticket page. Attackers can craft and...

5.4CVSS5.9AI score0.00289EPSS
SaveExploits0References2
Rows per page
Query Builder