Skip to content
OpenAdvisories

Archive

10 October 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.3
    CVE-2025-55903 Public exploit

    A HTML injection vulnerability exists in Perfex CRM v3.3.1. The application fails to sanitize user input in the "Bill T…

  • High 8.1
    CVE-2025-60378 Public exploit

    Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into i…

  • High 8.3
    CVE-2025-60880 Public exploit

    Bagisto is vulnerable to XSS through Admin Panel's product creation path

    An authenticated stored XSS vulnerability exists in the Bagisto 2.3.6 admin panel's product creation path, allowing an attacker to upload a crafted SVG file containing malicious JavaScript code. This vulnerability can be exploited by an authenticated admin us…