Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Creativeitem — Vulnerabilities & Security Advisories 17

Browse all 17 CVE security advisories affecting Creativeitem. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Creativeitem develops e-commerce and content management platforms with a focus on customizable digital solutions. Historically, their products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from insufficient input validation and insecure default configurations. The company has addressed multiple critical flaws in its core components, with 12 CVEs documented to date. Notable security characteristics include inconsistent patch release cycles and occasional delays in addressing reported vulnerabilities. While no major public security incidents have been widely reported, the consistent pattern of vulnerabilities suggests a need for enhanced security development practices across their product lines.

CVE ID Title CVSS Severity Published
CVE-2026-26211 Ekushey Project Manager CRM 5.0 Stored XSS via System Name Field — Ekushey Project Manager CRM CWE-79 4.8 Medium 2026-08-25
CVE-2026-66031 Ekushey Project Manager CRM 5.0 Stored XSS via Reply Ticket Field — Ekushey Project Manager CRM CWE-79 5.4 Medium 2026-07-27
CVE-2026-66030 Ekushey Project Manager CRM 5.0 Stored XSS via Ticket Title Field — Ekushey Project Manager CRM CWE-79 5.4 Medium 2026-07-27
CVE-2026-66029 Ekushey Project Manager CRM 5.0 Stored XSS via Client Name Field — Ekushey Project Manager CRM CWE-79 5.4 Medium 2026-07-27
CVE-2026-66028 Ekushey Project Manager CRM 5.0 Missing Uniqueness Constraint via Client Email — Ekushey Project Manager CRM CWE-303 6.7 Medium 2026-07-27
CVE-2023-53876 Academy LMS 6.1 Arbitrary File Upload Vulnerability via Profile Settings — Academy LMS CWE-434 5.4AI Medium AI 2025-12-15
CVE-2025-40992 Stored XSS in Creativeitem Sociopro — Sociopro CWE-79 5.4AI Medium AI 2025-10-02
CVE-2025-40991 Stored XSS in Creativeitem Ekushey CRM — Ekushey CRM CWE-79 6.1 - 2025-10-02
CVE-2025-40990 Stored XSS in Creativeitem Ekushey CRM — Ekushey CRM CWE-79 6.1 - 2025-10-02
CVE-2025-40989 Stored XSS in Creativeitem Ekushey CRM — Ekushey CRM CWE-79 6.1 - 2025-10-02
CVE-2025-27264 WordPress Doctor Appointment Booking Plugin <= 1.0.0 - Local File Inclusion vulnerability — Doctor Appointment Booking CWE-98 7.5 High 2025-03-03
CVE-2025-27263 WordPress Doctor Appointment Booking Plugin <= 1.0.0 - SQL Injection vulnerability — Doctor Appointment Booking CWE-89 8.5 High 2025-03-03
CVE-2023-3756 Creativeitem Atlas Business Directory Listing search cross site scripting — Atlas Business Directory Listing CWE-79 3.5 Low 2023-07-19
CVE-2023-3755 Creativeitem Atlas Business Directory Listing filter_listings cross site scripting — Atlas Business Directory Listing CWE-79 3.5 Low 2023-07-19
CVE-2023-3754 Creativeitem Ekushey Project Manager CRM xxxxxxxx[random-msg-hash] cross site scripting — Ekushey Project Manager CRM CWE-79 3.5 Low 2023-07-19
CVE-2023-3753 Creativeitem Mastery LMS browse cross site scripting — Mastery LMS CWE-79 3.5 Low 2023-07-19
CVE-2023-3752 Creativeitem Academy LMS courses cross site scripting — Academy LMS CWE-79 3.5 Low 2023-07-19

This page lists every published CVE security advisory associated with Creativeitem. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.