Worksuite vulnerabilities

Products

• HR, CRM and Project Management 1

Latest Worksuite CVEs

Newest publication first

1. CVE-2026-4165 Worksuite HR, CRM and Project Management create cross site scripting

   Published 2026-03-15

   Medium·CVSS 4.8 EPSS 0.23%

   A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can be initiated remotel...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.