Skip to content
OpenAdvisories

Vendor

CodeCanyon

22 known vulnerabilities.

9 results · Clear filters · Feed

  • Low 3.5

    CodeCanyon Rocket LMS Student Profile Image Upload cross site scripting

    A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. This affects an unknown function of the component Student Profile Image Upload. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has …

  • Low 2.4

    Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution manage_customer cross site scripting

    A weakness has been identified in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution up to 4.0. This impacts an unknown function of the file /dashboard/Ccustomer/manage_customer. This manipulation of the argument Search causes cross site sc…

  • Low 3.5

    Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System edit_profile cross site scripting

    A vulnerability was found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 20250320. Impacted is an unknown function of the file /edit_profile. Performing manipulation of the argument first_name/last_name results in basic…

  • Low 3.5

    Bdtask/CodeCanyon SalesERP User Profile edit_profile cross site scripting

    A flaw has been found in Bdtask/CodeCanyon SalesERP up to 20250728. This vulnerability affects unknown code of the file /edit_profile of the component User Profile Handler. This manipulation of the argument first_name/last_name causes basic cross site scripti…

  • Low 3.5

    CodeCanyon Perfex CRM Project Discussions Module 2 cross site scripting

    A vulnerability was found in CodeCanyon Perfex CRM 3.2.1. It has been classified as problematic. Affected is an unknown function of the file /perfex/clients/project/2 of the component Project Discussions Module. The manipulation of the argument description le…

  • Low 3.5

    CodeCanyon Perfex CRM Contracts contract cross site scripting

    A vulnerability has been found in CodeCanyon Perfex CRM up to 3.2.1 and classified as problematic. This vulnerability affects unknown code of the file /contract of the component Contracts. The manipulation of the argument content leads to cross site scripting…

  • Low 3.5

    CodeCanyon CRMGo SaaS show cross site scripting

    A vulnerability, which was classified as problematic, has been found in CodeCanyon CRMGo SaaS up to 7.2. This issue affects some unknown processing of the file /project/task/{task_id}/show. The manipulation of the argument comment leads to cross site scriptin…

  • Low 3.5

    CodeCanyon CRMGo SaaS note cross site scripting

    A vulnerability classified as problematic was found in CodeCanyon CRMGo SaaS 7.2. This vulnerability affects unknown code of the file /deal/{note_id}/note. The manipulation of the argument notes leads to cross site scripting. The attack can be initiated remot…

  • Low 3.5

    Codecanyon Tiva Events Calender cross site scripting

    A vulnerability classified as problematic was found in Codecanyon Tiva Events Calender 1.4. This vulnerability affects unknown code. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has bee…