VYPR

CodeCanyon SalesERP

by Bdtask

CVEs (2)

  • CVE-2025-13177MedNov 14, 2025
    risk 0.28cvss 4.3epss 0.00

    A vulnerability was detected in Bdtask/CodeCanyon SalesERP up to 20250728. This affects an unknown part. The manipulation results in cross-site request forgery. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about…

  • CVE-2025-13178LowNov 14, 2025
    risk 0.23cvss 3.5epss 0.00

    A flaw has been found in Bdtask/CodeCanyon SalesERP up to 20250728. This vulnerability affects unknown code of the file /edit_profile of the component User Profile Handler. This manipulation of the argument first_name/last_name causes basic cross site scripting. The attack is…