🔍 What is Energy Crm?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-40643

MEDIUM CVSS 5.4 Oct 23, 2025

A stored Cross-Site Scripting (XSS) vulnerability in Energy CRM v2025 allows attackers to inject malicious scripts via the 'JobCreatedBy' parameter in POST requests to '/crm/create_job_submit.php'. Th...

CVE-2025-40640

MEDIUM CVSS 5.4 Oct 10, 2025

A stored Cross-Site Scripting (XSS) vulnerability in Energy CRM v2025 allows attackers to inject malicious scripts via the customerName_0 parameter in POST requests to /crm/create_invoice_submit.php. ...

CVE-2025-40646

MEDIUM CVSS 5.4 Oct 2, 2025

A stored Cross-Site Scripting (XSS) vulnerability in Energy CRM v2025 allows attackers to inject malicious scripts via the JobCreatedBy parameter in POST requests to /crm/create_job_submit.php. This c...