CR
Vendor
Creativeitem
37
CVEs
0
On KEV
0
New 30D
Products
AL9.8
Academy LMS
Creativeitem
16 CVEs0 on KEV0 new
EP6.7
Ekushey Project Manager CRM
Creativeitem
8 CVEs0 on KEV0 new
EC5.4
Ekushey CRM
Creativeitem
3 CVEs0 on KEV0 new
AT6.1
Atlas
Creativeitem
2 CVEs0 on KEV0 new
DA8.5
Doctor Appointment Booking
Creativeitem
2 CVEs0 on KEV0 new
EP6.1
Ekushey Project Manager
Creativeitem
2 CVEs0 on KEV0 new
AL6.1
Academy Learning Management System
Creativeitem
1 CVEs0 on KEV0 new
ML6.1
Mastery Lms
Creativeitem
1 CVEs0 on KEV0 new
NV6.5
Neoflex Video Subscription System
Creativeitem
1 CVEs0 on KEV0 new
SO5.1
Sociopro
Creativeitem
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-26211 | EP Ekushey Project Manager CRM Creativeitem | 4.8 | Aug 25 | Ekushey Project Manager CRM 5.0 Stored XSS via System Name Field |
| CVE-2026-66031 | EP Ekushey Project Manager CRM Creativeitem | 5.4 | Jul 27 | Ekushey Project Manager CRM 5.0 Stored XSS via Reply Ticket Field |
| CVE-2026-66030 | EP Ekushey Project Manager CRM Creativeitem | 5.4 | Jul 27 | Ekushey Project Manager CRM 5.0 Stored XSS via Ticket Title Field |
| CVE-2026-66029 | EP Ekushey Project Manager CRM Creativeitem | 5.4 | Jul 27 | Ekushey Project Manager CRM 5.0 Stored XSS via Client Name Field |
| CVE-2026-66028 | EP Ekushey Project Manager CRM Creativeitem | 6.7 | Jul 27 | Ekushey Project Manager CRM 5.0 Missing Uniqueness Constraint via Client Email |
| CVE-2025-71179 | AL Academy Lms Creativeitem | 6.1 | Feb 3 | Creativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting (XSS) vulnerabilities via the search parameter to the /academy/blogs endpoint, and the string parameter to the… |
| CVE-2023-53876 | AL Academy LMS Creativeitem | 5.4 | Dec 15 | Academy LMS 6.1 Arbitrary File Upload Vulnerability via Profile Settings |
| CVE-2025-56748 | AL Academy Lms Creativeitem | 6.4 | Oct 15 | Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Base64 encoded templates without rate limiting, allowing brute force attacks to… |
| CVE-2025-56749 | AL Academy Lms Creativeitem | 9.4 | Oct 15 | Creativeitem Academy LMS up to and including 6.14 uses a hardcoded default JWT secret for token signing |
| CVE-2025-56746 | AL Academy Lms Creativeitem | 2.2 | Oct 15 | Creativeitem Academy LMS up to and including 5.13 does not regenerate session IDs upon successful authentication, enabling session fixation attacks where attackers can hijack user… |
| CVE-2025-56747 | AL Academy Lms Creativeitem | 6.5 | Oct 14 | Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability in the Api_instructor controller where regular authenticated users can access… |
| CVE-2025-40992 | SO Sociopro Creativeitem | 5.1 | Oct 2 | Stored XSS in Creativeitem Sociopro |
| CVE-2025-40991 | EC Ekushey CRM Creativeitem | 5.4 | Oct 2 | Stored XSS in Creativeitem Ekushey CRM |
| CVE-2025-40990 | EC Ekushey CRM Creativeitem | 5.4 | Oct 2 | Stored XSS in Creativeitem Ekushey CRM |
| CVE-2025-40989 | EC Ekushey CRM Creativeitem | 5.4 | Oct 2 | Stored XSS in Creativeitem Ekushey CRM |
| CVE-2025-27264 | DA Doctor Appointment Booking Creativeitem | 7.5 | Mar 3 | WordPress Doctor Appointment Booking Plugin <= 1.0.0 - Local File Inclusion vulnerability |
| CVE-2025-27263 | DA Doctor Appointment Booking Creativeitem | 8.5 | Mar 3 | WordPress Doctor Appointment Booking Plugin <= 1.0.0 - SQL Injection vulnerability |
| CVE-2024-38959 | AL Academy Lms Creativeitem | 6.1 | Jul 9 | Cross Site Scripting vulnerability in Creativeitem Academy LMS Learning Management System v.6.8.1 allows a remote attacker to execute arbitrary code and obtain sensitive… |
| CVE-2023-4974 | AL Academy Lms Creativeitem | 9.8 | Sep 15 | A vulnerability was found in Academy LMS 6.2 |
| CVE-2023-4973 | AL Academy Lms Creativeitem | 6.1 | Sep 15 | A vulnerability was found in Academy LMS 6.2 on Windows |
| CVE-2023-38964 | AL Academy Lms Creativeitem | 6.1 | Aug 4 | Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting (XSS) vulnerability |
| CVE-2023-4119 | AL Academy Lms Creativeitem | 6.1 | Aug 3 | A vulnerability has been found in Academy LMS 6.0 and classified as problematic |
| CVE-2023-3756 | AT Atlas Creativeitem | 6.1 | Jul 19 | A vulnerability was found in Creativeitem Atlas Business Directory Listing 2.13 and classified as problematic |
| CVE-2023-3755 | AT Atlas Creativeitem | 6.1 | Jul 19 | A vulnerability has been found in Creativeitem Atlas Business Directory Listing 2.13 and classified as problematic |
| CVE-2023-3754 | EP Ekushey Project Manager Creativeitem | 6.1 | Jul 19 | A vulnerability, which was classified as problematic, was found in Creativeitem Ekushey Project Manager CRM 5.0 |
| CVE-2023-3753 | ML Mastery Lms Creativeitem | 6.1 | Jul 19 | A vulnerability classified as problematic has been found in Creativeitem Mastery LMS 1.2 |
| CVE-2023-3752 | AL Academy Lms Creativeitem | 6.1 | Jul 19 | A vulnerability was found in Creativeitem Academy LMS 5.15 |
| CVE-2022-47132 | AL Academy Lms Creativeitem | 8.8 | Feb 3 | A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows attackers to arbitrarily add Administrator users |
| CVE-2022-47131 | AL Academy Lms Creativeitem | 4.8 | Feb 3 | A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attacker to arbitrarily create a page |
| CVE-2022-47130 | AL Academy Lms Creativeitem | 4.3 | Feb 3 | A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discount coupon to be arbitrarily created if an attacker with administrative privileges interacts on the… |
| CVE-2022-38553 | AL Academy Learning Management System Creativeitem | 6.1 | Sep 26 | Academy Learning Management System before v5.9.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Search parameter |
| CVE-2022-29380 | AL Academy Lms Creativeitem | 4.8 | May 25 | Academy-LMS v4.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the SEO panel |
| CVE-2020-22273 | NV Neoflex Video Subscription System Creativeitem | 6.5 | Nov 4 | Neoflex Video Subscription System Version 2.0 is affected by CSRF which allows the Website's Settings to be changed (such as Payment Settings) |
| CVE-2018-18417 | EP Ekushey Project Manager Creativeitem | 5.4 | Oct 19 | In the 3.1 version of Ekushey Project Manager CRM, Stored XSS has been discovered in the input and upload sections, as demonstrated by the name parameter to the… |