Skip to content
OpenAdvisories

Vendor

WorkDo

4 known vulnerabilities.

Products

eCommerceGo SaaS 2 HRMGo 1 TicketGo 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.1
    CVE-2025-40978

    Multiple vulnerabilities in WorkDo products

    Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's eCommerceGo SaaS, consisting of a stored XSS due to a lack of proper validation of user input by sending a POST request to ‘/ticket/x/conversion’, using the ‘reply_description’ parameter.

    WorkDo eCommerceGo SaaS
  • Medium 5.1
    CVE-2025-40977

    Multiple vulnerabilities in WorkDo products

    Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's eCommerceGo SaaS, consisting of a lack of proper validation of user input by sending a POST request to ‘/store-ticket’, using the ‘subject’ and ‘description’ parameters.

    WorkDo eCommerceGo SaaS
  • Medium 5.1
    CVE-2025-40976

    Multiple vulnerabilities in WorkDo products

    Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's TicketGo, consisting of a lack of proper validation of user input by sending a POST request to ‘/ticketgo-saas/home’, using the ‘description’ parameter.

    WorkDo TicketGo
  • Medium 5.1
    CVE-2025-40975

    Multiple vulnerabilities in WorkDo products

    Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's HRMGo, consisting of a lack of proper validation of user input by sending a POST request to ‘/hrmgo/ticket/changereply’, using the ‘description’ parameter.

    WorkDo HRMGo