CVE-2026-92418

A vulnerability was determined in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This vulnerability affects unknown code of the file src/main/resources/public/js/customerServe/customer.serve.js of the component Save Endpoint. This manipulation of the argument customerName causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-79
• CWE-94

• https://github.com/ChangeWeDer/crm/
• https://github.com/ChangeWeDer/crm/issues/4
• https://vuldb.com/cve/CVE-2026-92418
• https://vuldb.com/submit/940698
• https://vuldb.com/vuln/405596
• https://vuldb.com/vuln/405596/cti
• https://vuldb.com/submit/940698

Published

Sep 16, 2026

Last Modified

Sep 16, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-92405A security vulnerability has been detected in SourceCodester…7.3
• CVE-2026-92406A vulnerability was detected in SourceCodester Inventory and…7.3
• CVE-2026-9241The FOX – Currency Switcher Professional for WooCommerce plu…4.3
• CVE-2026-92413A flaw has been found in Artifex MuPDF up to b6d17493700c621…4.3
• CVE-2026-92416A vulnerability has been found in Open5GS up to 2.8.0. Affec…4.3
• CVE-2026-92417A vulnerability was found in Open5GS up to 2.8.0. This affec…6.5
• CVE-2026-9242The RegistrationMagic – Custom Registration Forms, User Regi…5.3
• CVE-2026-9243The Plus Addons for Elementor plugin for WordPress is vulner…6.4
• CVE-2026-9244Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-9245Improper input validation in the external authentication pro…5
• CVE-2026-92455yshop-crm through 2.1.3 fails to enforce authorization on th…4.3
• CVE-2026-92456yshop-crm through 2.1.3 fails to enforce authorization on th…7.1