All 6 CVE vulnerabilities found in Ekushey Project Manager CRM, with AI-generated Chinese analysis, references, and POCs.
Vendor: Creativeitem
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-26211 | Ekushey Project Manager CRM 5.0 Stored XSS via System Name Field CWE-79 | 4.8 | Medium | 2026-08-25 |
| CVE-2026-66031 | Ekushey Project Manager CRM 5.0 Stored XSS via Reply Ticket Field CWE-79 | 5.4 | Medium | 2026-07-27 |
| CVE-2026-66030 | Ekushey Project Manager CRM 5.0 Stored XSS via Ticket Title Field CWE-79 | 5.4 | Medium | 2026-07-27 |
| CVE-2026-66029 | Ekushey Project Manager CRM 5.0 Stored XSS via Client Name Field CWE-79 | 5.4 | Medium | 2026-07-27 |
| CVE-2026-66028 | Ekushey Project Manager CRM 5.0 Missing Uniqueness Constraint via Client Email CWE-303 | 6.7 | Medium | 2026-07-27 |
| CVE-2023-3754 | Creativeitem Ekushey Project Manager CRM xxxxxxxx[random-msg-hash] cross site scripting CWE-79 | 3.5 | Low | 2023-07-19 |
All 6 known CVE vulnerabilities affecting Ekushey Project Manager CRM with full Chinese analysis, references, and POCs where available.