Lucene search
+L

6938 matches found

OSV
OSV
added 2025/11/14 10:15 p.m.9 views

CVE-2025-13186

A weakness has been identified in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution up to 4.0. This impacts an unknown function of the file /dashboard/Ccustomer/managecustomer. This manipulation of the argument Search causes cross site scripting. The attack may be initiated...

5.4CVSS4.1AI score0.00268EPSS
SaveExploits1References4
CVE
CVE
added 2025/11/14 9:32 p.m.40 views

CVE-2025-13186

CVE-2025-13186 affects Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution (up to 4.0). The vulnerability is in the file /dashboard/Ccustomer/manage_customer (also seen as /dashboard/Ccustomer/manage customer) where manipulation of the Search argument causes cross-site scripting...

5.4CVSS5.2AI score0.00268EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/14 9:32 p.m.9 views

CVE-2025-13186 Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution manage_customer cross site scripting

A weakness has been identified in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution up to 4.0. This impacts an unknown function of the file /dashboard/Ccustomer/managecustomer. This manipulation of the argument Search causes cross site scripting. The attack may be initiated...

4.8CVSS2.9AI score0.00268EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/11/14 9:32 p.m.30 views

CVE-2025-13186 Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution manage_customer cross site scripting

A weakness has been identified in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution up to 4.0. This impacts an unknown function of the file /dashboard/Ccustomer/managecustomer. This manipulation of the argument Search causes cross site scripting. The attack may be initiated...

4.8CVSS0.00268EPSS
SaveExploits1References4
HackRead
HackRead
added 2025/11/13 1:01 a.m.11 views

ThreatBook Peer-Recognized as a Strong Performer in the 2025 Gartner® Peer Insights™ Voice of the Customer for Network Detection and Response — for the Third Consecutive Year

Singapore, Singapore, 13th November 2025, CyberNewsWire...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/11/12 6:01 p.m.7 views

CVE-2025-59512

Improper access control in Customer Experience Improvement Program CEIP allows an authorized attacker to elevate privileges locally...

7.8CVSS5.4AI score0.02931EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/11 6:15 p.m.7 views

CVE-2025-59512

Improper access control in Customer Experience Improvement Program CEIP allows an authorized attacker to elevate privileges locally...

7.8CVSS0.02931EPSS
SaveExploits0References3
OSV
OSV
added 2025/11/11 6:15 p.m.7 views

CVE-2025-59512

Improper access control in Customer Experience Improvement Program CEIP allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.02931EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2025/11/11 5:59 p.m.7 views

CVE-2025-59512

Improper access control in Customer Experience Improvement Program CEIP allows an authorized attacker to elevate privileges locally...

7.8CVSS5.5AI score0.02931EPSS
SaveExploits0References2Affected Software20
Cvelist
Cvelist
added 2025/11/11 5:59 p.m.24 views

CVE-2025-59512 Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability

...

7.8CVSS0.02931EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/11/11 5:59 p.m.1 views

CVE-2025-59512 Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability

...

7.8CVSS6.6AI score0.02931EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/11 5:59 p.m.52 views

CVE-2025-59512

Technical details about CVE-2025-59512, including affected product, root cause, exploitability or remediation, are not publicly provided in the supplied Connected Documents. Monitor for official updates (mitigations/patches) as newer MSKBs may cover this CVE.

7.8CVSS5.3AI score0.02931EPSS
SaveExploits0References3Affected Software13
EUVD
EUVD
added 2025/11/11 3:31 p.m.14 views

EUVD-2025-84352

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'firstname' in '/clients/savecontact/'...

5.1CVSS6.8AI score0.00171EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/11/11 11:57 a.m.16 views

CVE-2025-41102 Multiple vulnerabilities in Fairsketch's RISE CRM Framework

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in '/events/save'...

5.1CVSS0.00163EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/11 11:57 a.m.22 views

CVE-2025-41102

The CVE-2025-41102 entry concerns Fairsketch's RISE CRM Framework v3.8.1. The vulnerability is an HTML injection caused by insufficient validation of user input in the POST parameter title sent to /events/save. This summarizes the root cause as lack of input validation on a user-controllable fiel...

5.4CVSS6.9AI score0.00163EPSS
SaveExploits0References1Affected Software1
Microsoft CVE
Microsoft CVE
added 2025/11/11 8:00 a.m.10 views

Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability

Improper access control in Customer Experience Improvement Program CEIP allows an authorized attacker to elevate privileges locally...

7.8CVSS5.4AI score0.02931EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.11 views

PT-2025-46329

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in '/events/save'...

5.1CVSS7.3AI score0.00163EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.10 views

PT-2025-46462

Name of the Vulnerable Software and Affected Versions Customer Experience Improvement Program CEIP affected versions not specified Description An improper access control issue exists within the Customer Experience Improvement Program CEIP. This allows a local attacker who is already authorized to...

7.8CVSS5.3AI score0.02931EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2025/11/11 12:00 a.m.11 views

FairSketch Rise Ultimate Project Manager and CRM 跨站脚本漏洞

FairSketch Rise Ultimate Project Manager and CRM is a team management and customer relationship management system from FairSketch. A cross-site scripting vulnerability exists in FairSketch Rise Ultimate Project Manager and CRM version 3.8.1, which stems from insufficient validation of user input...

5.4CVSS6.2AI score0.00163EPSS
SaveExploits0References1
Kaspersky
Kaspersky
added 2025/11/11 12:00 a.m.72 views

KLA90057 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code, read local files, cause denial of service. Below is a...

9.8CVSS7.7AI score0.05923EPSS
SaveExploits2References29
Rows per page
Query Builder