Vulnerabilidades en Creativeitem
16 resultadosAnálisis Vexday
A Creativeitem possui 12 vulnerabilidades catalogadas, todas de baixa severidade e nenhuma sob ataque ativo no momento. A fraqueza predominante é injeção de cross-site scripting (CWE-79), indicando deficiências na validação de entrada; porém, a ausência de divulgações recentes sugere que o risco está estabilizado e não representa ameaça imediata.
CVE-2025-27264HIGHWordPress Doctor Appointment Booking Plugin <= 1.0.0 - Local File Inclusion vulnerabilityEPSS 0.8%CVE-2025-27263HIGHWordPress Doctor Appointment Booking Plugin <= 1.0.0 - SQL Injection vulnerabilityEPSS 0.5%CVE-2023-3754LOWCreativeitem Ekushey Project Manager CRM xxxxxxxx[random-msg-hash] cross site scriptingEPSS 0.4%CVE-2023-3753LOWCreativeitem Mastery LMS browse cross site scriptingEPSS 0.4%CVE-2023-3752LOWCreativeitem Academy LMS courses cross site scriptingEPSS 0.4%CVE-2023-3756LOWCreativeitem Atlas Business Directory Listing search cross site scriptingEPSS 0.4%CVE-2023-3755LOWCreativeitem Atlas Business Directory Listing filter_listings cross site scriptingEPSS 0.4%CVE-2025-40992MEDIUMStored XSS in Creativeitem SocioproEPSS 0.3%CVE-2026-66028HIGHEkushey Project Manager CRM 5.0 Missing Uniqueness Constraint via Client EmailEPSS 0.3%CVE-2023-53876MEDIUMAcademy LMS 6.1 Arbitrary File Upload Vulnerability via Profile SettingsEPSS 0.2%CVE-2025-40989MEDIUMStored XSS in Creativeitem Ekushey CRMEPSS 0.2%CVE-2025-40990MEDIUMStored XSS in Creativeitem Ekushey CRMEPSS 0.2%CVE-2025-40991MEDIUMStored XSS in Creativeitem Ekushey CRMEPSS 0.2%CVE-2026-66031MEDIUMEkushey Project Manager CRM 5.0 Stored XSS via Reply Ticket FieldEPSS 0.2%CVE-2026-66029MEDIUMEkushey Project Manager CRM 5.0 Stored XSS via Client Name FieldEPSS 0.2%CVE-2026-66030MEDIUMEkushey Project Manager CRM 5.0 Stored XSS via Ticket Title FieldEPSS 0.2%