Skip to content
OpenAdvisories

Product · Creativeitem

Ekushey CRM

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.1
    CVE-2025-40991

    Stored XSS in Creativeitem Ekushey CRM

    Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_file/upload/xxxx", affecting to "description" parameter via POST. This vulnerability coul…

    Creativeitem Ekushey CRM
  • Medium 5.1
    CVE-2025-40990

    Stored XSS in Creativeitem Ekushey CRM

    Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_bug/create/xxx", affecting to "title" and "description" parameters via POST. This vulnera…

    Creativeitem Ekushey CRM
  • Medium 5.1
    CVE-2025-40989

    Stored XSS in Creativeitem Ekushey CRM

    Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_message/add/xxx", affecting to "message" parameter via POST. This vulnerability could all…

    Creativeitem Ekushey CRM