Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:15 p.m.1 views

CVE-2026-4165

A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS4AI score0.00036EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/16 3:30 p.m.2 views

EUVD-2026-12207

A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS3.9AI score0.00036EPSS
Exploits0References4
NVD
NVD
added 2026/03/16 2:19 p.m.1 views

CVE-2026-4165

A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS0.00036EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/15 5:2 a.m.2 views

CVE-2026-4165

A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS3.9AI score0.00036EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2026/03/15 5:2 a.m.32 views

CVE-2026-4165 Worksuite HR, CRM and Project Management create cross site scripting

A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS0.00036EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/03/15 5:2 a.m.2 views

CVE-2026-4165 Worksuite HR, CRM and Project Management create cross site scripting

A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS3.9AI score0.00036EPSS
Exploits0References3
CVE
CVE
added 2026/03/15 5:2 a.m.6 views

CVE-2026-4165

CVE-2026-4165 affects Worksuite HR, CRM and Project Management up to version 5.5.25. The vulnerability is a cross-site scripting (XSS) issue in an unknown function of the file /account/orders/create, triggered by manipulating the Client Note argument. The attack is remote, and the exploit has bee...

4.8CVSS3.9AI score0.00036EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/03/15 12:0 a.m.1 views

PT-2026-25539

A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS3.9AI score0.00036EPSS
Exploits0References7
OSV
OSV
added 2022/07/12 3:15 p.m.0 views

CVE-2022-2293

A vulnerability classified as problematic was found in SourceCodester Simple Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /cissms/index.php/orders/create. The manipulation of the argument customername with the input alert"XSS" leads to cross...

5.4CVSS3.8AI score
Exploits0References2
Rows per page
Query Builder