VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Nov 14, 2025· Updated Apr 29, 2026

CVE-2025-13177

CVE-2025-13177

Description

A vulnerability was detected in Bdtask/CodeCanyon SalesERP up to 20250728. This affects an unknown part. The manipulation results in cross-site request forgery. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Bdtask/Saleserp2 versions
    cpe:2.3:a:bdtask:saleserp:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:bdtask:saleserp:*:*:*:*:*:*:*:*range: <=2025-10-16
    • (no CPE)range: <=20250728

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.