Lucene search
K

6 matches found

EUVD
EUVD
added 2026/03/16 3:30 p.m.2 views

EUVD-2026-12207

A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS3.9AI score0.00036EPSS
Exploits0References4
NVD
NVD
added 2026/03/16 2:19 p.m.1 views

CVE-2026-4165

A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS0.00036EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/15 5:2 a.m.1 views

CVE-2026-4165

A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS3.9AI score0.00036EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/15 5:2 a.m.2 views

CVE-2026-4165 Worksuite HR, CRM and Project Management create cross site scripting

A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS3.9AI score0.00036EPSS
Exploits0References3
CVE
CVE
added 2026/03/15 5:2 a.m.6 views

CVE-2026-4165

CVE-2026-4165 affects Worksuite HR, CRM and Project Management up to version 5.5.25. The vulnerability is a cross-site scripting (XSS) issue in an unknown function of the file /account/orders/create, triggered by manipulating the Client Note argument. The attack is remote, and the exploit has bee...

4.8CVSS3.9AI score0.00036EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/03/15 12:0 a.m.1 views

PT-2026-25539

A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS3.9AI score0.00036EPSS
Exploits0References7
Rows per page
Query Builder