CVE Intelligence

WorkDo eCommerceGo SaaS vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting WorkDo eCommerceGo SaaS: 2 record(s), with affected versions and fixes.

CVE-2025-40978 Medium · 5.1 CWE-79 Jan 12, 2026
Multiple vulnerabilities in WorkDo products
Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's eCommerceGo SaaS, consisting of a stored XSS due to a lack of proper validation of user input by sending a POST request to ‘/ticket/x/conversion’, using the ‘reply_description’ parameter.
CVE-2025-40977 Medium · 5.1 CWE-79 Jan 12, 2026
Multiple vulnerabilities in WorkDo products
Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's eCommerceGo SaaS, consisting of a lack of proper validation of user input by sending a POST request to ‘/store-ticket’, using the ‘subject’ and ‘description’ parameters.