103 matches found
CVE-2025-47629
CVE-2025-47629 describes a Deserialization of Untrusted Data vulnerability in WordPress plugin WP-CRM System (affected: versions up to 3.4.1). The underlying issue allows PHP object injection. Public sources (including Red Hat, CVE lists, Patchstack) note the vulnerability as unpatched (at least ...
PT-2025-20194 · Mario Peshev · Wp-Crm System
Name of the Vulnerable Software and Affected Versions: Mario Peshev WP-CRM System versions 3.4.1 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For Mario Peshev WP-CRM System versions 3.4.1 and earlier, update to...
WordPress plugin WP-CRM System 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A code issue vulnerability exists in...
Odoo 访问控制错误漏洞
Odoo is an Enterprise Resource Planning ERP and Customer Relationship Management CRM system from Odoo Belgium. The system is developed using Python language, PostgreSQL as the database, and includes modules for sales management, inventory management, and financial management. An access control...
CVE-2024-55991
Missing Authorization vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-CRM System: from n/a through = 3.2.9.1...
CVE-2024-55991
Missing Authorization vulnerability in WP-CRM WP-CRM System allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-CRM System: from n/a through 3.2.9.1...
CVE-2024-55991
CVE-2024-55991 affects the WordPress plugin WP-CRM System (versions up to 3.2.9.1). The root cause is a Missing Authorization vulnerability due to incorrectly configured access control, enabling unauthorized access. Documented details indicate Broken Access Control as the weakness, impacting WP-C...
CVE-2023-24204
SQL injection vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitrary code via the name parameter in get-quote.php...
CVE-2024-30434
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP-CRM System allows Stored XSS.This issue affects WP-CRM System: from n/a through 3.2.9...
CVE-2024-30434
Technical details for CVE-2024-30434 are not provided in the connected documents. Public information about affected product/version/impact is unavailable here; monitor for updates from vendors/security advisories.
CVE-2024-30434 WordPress WP-CRM System plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP-CRM System allows Stored XSS.This issue affects WP-CRM System: from n/a through 3.2.9...
WordPress WP-CRM System Plugin <= 3.2.9 is vulnerable to Cross Site Scripting (XSS)
Software WP-CRM System Type Plugin Vulnerable versions = 3.2.9 Fixed in 3.2.9.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30434 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 0778380082db Credits Joshua Chan Required privilege...
SAP Message Server Authorization Issues Vulnerability
SAP Message Server is a message server application from SAP Germany. SAP Message Server is vulnerable to authorization issues, no details of the vulnerability are provided at this time...
ChurchCRM Cross-Site Scripting Vulnerability (CNVD-2023-64495)
ChurchCRM is an open source CRM system for churches. A cross-site scripting vulnerability exists in ChurchCRM v4.5.4. The vulnerability stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary Web scrip...
Sql injection
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function...
CVE-2023-24728
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the contact parameter in the user profile update function...
CVE-2023-24729
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the address parameter in the user profile update function...
CVE-2023-24728
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the contact parameter in the user profile update function...