webkul Vulnerability Advisory Catalog

Total 55 security vulnerabilities recorded for webkul software and firmware.

← Back to All Vendors
Component: qloapps

An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and the...

📅 2023-06-23
CVSS 5.4 Dossier →
Component: krayin_crm

A vulnerability, which was classified as problematic, was found in Webkul krayin crm 1.2.4. This affects an unknown part of the file /admin/contacts/o...

📅 2023-05-27
CVSS 2.4 Dossier →
Component: qloapps

Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtain sensitive information via the back and email_cre...

📅 2023-05-11
CVSS 6.1 Dossier →
Component: krayin

Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting (XSS)....

📅 2022-06-21
CVSS 6.1 Dossier →
Component: bagisto

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values (such as address, review, orders, etc.) can also be manip...

📅 2019-09-18
CVSS 8.8 Dossier →
Component: bagisto

Bagisto 0.1.5 allows CSRF under /admin URIs....

📅 2019-08-11
CVSS 8.8 Dossier →
CVE-2010-1659 UNKNOWN
Component: com_ultimateportfolio

Directory traversal vulnerability in the Ultimate Portfolio (com_ultimateportfolio) component 1.0 for Joomla! allows remote attackers to read arbitrar...

📅 2010-05-03
CVSS 5.0 Dossier →
Page 3 of 3 (55 Total Records)