CVE-2018-18417

CVE-2018-18417 : In Ekushey Project Manager CRM v3.1, a stored cross-site scripting (XSS) vulnerability exists in the input and upload sections, demonstrated by the name parameter to the index.php/admin/client/create endpoint. The root cause is a stored XSS condition that can inject script/HTML i...

CVE-2023-3754

CVE-2023-3754 affects Creativeitem Ekushey Project Manager CRM 5.0. A cross-site scripting vulnerability exists in an unknown function of the file /index.php/client/message/message_read/xxxxxxxx[random-msg-hash], where manipulating the message parameter enables remote XSS. The primary documents d...