Bdtask · weakness class
Cross-site Scripting
17 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.
- Bdtask Multi-Store Inventory Management System cross site scripting
- Stored XSS vulnerability in BDTASK Multi-Store Inventory Management System 1.0 allows a local admin to inject arbitrary code via the Customer Name Field.
- Bdtask Multi-Store Inventory Management System Store Update Page cross site scripting
- Bdtask Hospita AutoManager Hospital Activities Page form cross site scripting
- Bdtask Multi-Store Inventory Management System Page Title cross site scripting
- Bdtask G-Prescription Gynaecology & OBS Consultation Software Edit Venue Page cross site scripting
- Bdtask G-Prescription Gynaecology & OBS Consultation Software Prescription Dashboard Index cross site scripting
- Bdtask Bhojon Best Restaurant Management Software Message Page message cross site scripting
- Bdtask Isshue Multi Store eCommerce Shopping Cart Solution Manage Sale Page manage_invoice cross site scripting
- Bdtask G-Prescription Gynaecology & OBS Consultation Software OBS Patient/Gynee Prescription cross site scripting
- HTML injection in Isshue from Bdtask
- Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution manage_customer cross site scripting
- Isshue Shopping Cart 3.5 - 'Title' Cross Site Scripting (XSS)
- Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System edit_profile cross site scripting
- Bdtask/CodeCanyon SalesERP User Profile edit_profile cross site scripting
- Bdtask Bhojon All-In-One Restaurant Management System User Information profile cross site scripting
- Bdtask Garage 24 Garage Management Software Profile edit_profile cross site scripting
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.