Archive
10 October 2025
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
High 8.3CVE-2025-55903 Public exploit
A HTML injection vulnerability exists in Perfex CRM v3.3.1. The application fails to sanitize user input in the "Bill T…
-
High 8.1CVE-2025-60378 Public exploit
Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into i…
-
High 8.3CVE-2025-60880 Public exploit
Bagisto is vulnerable to XSS through Admin Panel's product creation path
An authenticated stored XSS vulnerability exists in the Bagisto 2.3.6 admin panel's product creation path, allowing an attacker to upload a crafted SVG file containing malicious JavaScript code. This vulnerability can be exploited by an authenticated admin us…