72crm records
5 published records for vendor 72crm.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2022-46610No exploit | 72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function.72crm · wukong crm · CWE-434 | High8.8 | — | 18.0% | Jan 10, 2023 |
39Monitor | CVE-2022-37181No exploit | 72crm 9.0 has an Arbitrary file upload vulnerability.72crm · wukong crm · CWE-434 | Critical9.8 | — | 1.2% | Aug 24, 2022 |
35Monitor | CVE-2022-37178No exploit | An issue was discovered in 72crm 9.0.72crm · wukong crm · CWE-89 | High8.8 | — | 1.0% | Aug 24, 2022 |
8Monitor | CVE-2025-5879No exploit | WuKongOpenSource WukongCRM File Upload AdminSysConfigController.java cross site scripting72crm · wukong crm · CWE-79 | Low2.0 | — | 0.3% | Jun 9, 2025 |
8Monitor | CVE-2025-6106No exploit | WuKongOpenSource WukongCRM AdminRoleController.java cross-site request forgery72crm · wukong crm · CWE-352 | Low2.1 | — | 0.2% | Jun 16, 2025 |
- CVE-2022-4661040Plan
72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function.
HighCVSS 8.8No exploitEPSS 18%72crm · wukong crmJan 10, 2023
- CVE-2022-3718139Monitor
72crm 9.0 has an Arbitrary file upload vulnerability.
CriticalCVSS 9.8No exploitEPSS 1%72crm · wukong crmAug 24, 2022
- CVE-2022-3717835Monitor
An issue was discovered in 72crm 9.0.
HighCVSS 8.8No exploitEPSS 1%72crm · wukong crmAug 24, 2022
- CVE-2025-58798Monitor
WuKongOpenSource WukongCRM File Upload AdminSysConfigController.java cross site scripting
LowCVSS 2.0No exploitEPSS 0%72crm · wukong crmJun 9, 2025
- CVE-2025-61068Monitor
WuKongOpenSource WukongCRM AdminRoleController.java cross-site request forgery
LowCVSS 2.1No exploitEPSS 0%72crm · wukong crmJun 16, 2025