GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Aaron Amran Bin Amiruddin

9 vulnerability records and advisories credit this contributor.

CVE-2026-70560
Ultimate POS Stored XSS via First Name Field in Leave Notifications
CVE-2026-64828
Froiden TableTrack 1.3.10 Stored XSS via Order Notes Field
CVE-2026-66031
Ekushey Project Manager CRM 5.0 Stored XSS via Reply Ticket Field
CVE-2026-66030
Ekushey Project Manager CRM 5.0 Stored XSS via Ticket Title Field
CVE-2026-66028
Ekushey Project Manager CRM 5.0 Missing Uniqueness Constraint via Client Email
CVE-2026-66029
Ekushey Project Manager CRM 5.0 Stored XSS via Client Name Field
CVE-2026-63081
Perfect Support Ticketing System 1.7 Stored XSS via Ticket Notes Field
CVE-2026-63082
Perfect Support Ticketing System 1.7 Broken Access Control via Agent Assignment
CVE-2026-60120
Bagisto < 2.4.4 Stored XSS via CSTI in create.blade.php