CVE-2024-9030

CVE-2024-9030 affects CodeCanyon CRMGo SaaS 7.2. The vulnerability is a cross-site scripting flaw in the notes parameter of the file /deal/{note_id}/note. It can be triggered remotely, and exploits have been disclosed publicly. Some sources list varying severity (up to medium) but all confirm XSS...

CVE-2024-9031

CodeCanyon CRMGo SaaS (up to 7.2) has a cross-site scripting flaw in the /project/task/{task_id}/show endpoint triggered by the comment parameter. The issue may be exploited remotely and exploits have been disclosed publicly. Current remediation guidance in the connected docs is to disable access...