📦 Saleserp

This vulnerability in Bdtask SalesERP allows attackers to bypass authorization controls by manipulating the ci_session parameter on administrative endpoints. It affects all versions up to 20260116, en...

This vulnerability allows attackers to perform cross-site request forgery (CSRF) attacks against Bdtask/CodeCanyon SalesERP systems. Attackers can trick authenticated users into executing unintended a...

This vulnerability allows attackers to inject malicious scripts into the first_name and last_name fields of the user profile editor in Bdtask/CodeCanyon SalesERP. The cross-site scripting (XSS) attack...