Workdo - vulnerabilities (CVEs)

7 CVEs in 5 products, 0 in the last 30 days, newest from 2026-01-12.

Products

CVE-2025-40978 - CVSS 5.1 (medium), 2026-01-12: Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's eCommerceGo SaaS, consisting of a stored XSS due to a lack of proper validation of user input by…
CVE-2025-40977 - CVSS 5.1 (medium), 2026-01-12: Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's eCommerceGo SaaS, consisting of a lack of proper validation of user input by sending a POST…
CVE-2025-40976 - CVSS 5.1 (medium), 2026-01-12: Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's TicketGo, consisting of a lack of proper validation of user input by sending a POST request to…
CVE-2025-40975 - CVSS 5.1 (medium), 2026-01-12: Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's HRMGo, consisting of a lack of proper validation of user input by sending a POST request to…
CVE-2025-63294 - CVSS 6.5 (medium), 2025-11-04: WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. An authenticated user can create leave or resignation records on…
CVE-2024-9031 - CVSS 5.4 (medium), 2024-09-20: A vulnerability, which was classified as problematic, has been found in CodeCanyon CRMGo SaaS up to 7.2. This issue affects some unknown processing of the…
CVE-2024-9030 - CVSS 5.4 (medium), 2024-09-20: A vulnerability classified as problematic was found in CodeCanyon CRMGo SaaS 7.2. This vulnerability affects unknown code of the file /deal/{note_id}/note.…