CVE-2026-70560
Ultimate POS Stored XSS via First Name Field in Leave Notifications
Discovering zero-days for Common Vulnerabilities and Exposures (CVEs) on real-world softwares.
Aug
2026
Jul
2026
CVE-2026-66028
Ekushey Project Manager CRM 5.0 Missing Uniqueness Constraint via Client Email
Jul
2026
CVE-2026-66029
Ekushey Project Manager CRM 5.0 Stored XSS via Client Name Field
Jul
2026
CVE-2026-66030
Ekushey Project Manager CRM 5.0 Stored XSS via Ticket Title Field
Jul
2026
CVE-2026-66031
Ekushey Project Manager CRM 5.0 Stored XSS via Reply Ticket Field
Jul
2026
CVE-2026-64828
Froiden TableTrack 1.3.10 Stored XSS via Order Notes Field
Jul
2026
CVE-2026-63081
Perfect Support Ticketing System 1.7 Stored XSS via Ticket Notes Field
Jul
2026
CVE-2026-63082
Perfect Support Ticketing System 1.7 Broken Access Control via Agent Assignment
Jul
2026
CVE-2026-60120
Bagisto < 2.4.4 Stored XSS via CSTI in create.blade.php