Skip to content
OpenAdvisories

Vendor

Creativeitem

17 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2026-26211 Public exploit

    Ekushey Project Manager CRM 5.0 Stored XSS via System Name Field

    Ekushey Project Manager CRM stores the administrator-configured system name and writes it to the login page without output encoding. The value is emitted in three places on that page: the content attribute of the description meta element, the title element, a…