Lucene search
+L

7 matches found

NVD
NVD
added 2026/07/27 7:17 p.m.15 views

CVE-2026-66031

Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the Reply Ticket field. Attackers can craft and store malicious scripts that...

5.4CVSS0.00165EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/27 6:9 p.m.20 views

EUVD-2026-49397

Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the Reply Ticket field. Attackers can craft and store malicious scripts that...

5.4CVSS6AI score0.00165EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/27 6:9 p.m.33 views

CVE-2026-66031 Ekushey Project Manager CRM 5.0 Stored XSS via Reply Ticket Field

Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the Reply Ticket field. Attackers can craft and store malicious scripts that...

5.4CVSS0.00165EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/07/27 6:9 p.m.7 views

CVE-2026-66031 Ekushey Project Manager CRM 5.0 Stored XSS via Reply Ticket Field

Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the Reply Ticket field. Attackers can craft and store malicious scripts that...

5.4CVSS6AI score0.00165EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/27 6:9 p.m.8 views

CVE-2026-66031

Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the Reply Ticket field. Attackers can craft and store malicious scripts that...

5.4CVSS6AI score0.00165EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/27 6:9 p.m.21 views

CVE-2026-66031

The vulnerability CVE-2026-66031 affects Ekushey Project Manager CRM version 5.0. It is a stored cross-site scripting (XSS) flaw triggered by malicious payloads entered into the Reply Ticket field, executable in the browser sessions of Staff or Administrator users when they view the Support Ticke...

5.4CVSS6AI score0.00165EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/27 12:0 a.m.37 views

PT-2026-65095

Name of the Vulnerable Software and Affected Versions Ekushey Project Manager CRM versions prior to 5.1 Description A stored cross-site scripting issue exists where authenticated client users can inject arbitrary HTML and JavaScript. This occurs when malicious payloads are entered into the Reply...

5.4CVSS5.4AI score0.00165EPSS
SaveExploits0References5
Rows per page
Query Builder