# cve.now: Bdtask

The newest entries naming Bdtask as an affected vendor (up to 200), of 39 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-116385](https://cve.now/CVE-2026-116385.md): Bdtask Garage 24 Garage Management Software Profile edit\_profile cross site scripting (CVSS 5.1)
- [CVE-2026-116384](https://cve.now/CVE-2026-116384.md): Bdtask Garage 24 Garage Management Software Backend improper authorization (CVSS 5.3)
- [CVE-2026-10172](https://cve.now/CVE-2026-10172.md): Bdtask Multi-Store Inventory Management System Component Module.php upload unrestricted upload (CVSS 5.3)
- [CVE-2026-10155](https://cve.now/CVE-2026-10155.md): Bdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts\_report\_search sql injection (CVSS 5.1)
- [CVE-2019-25505](https://cve.now/CVE-2019-25505.md): Tradebox 5.4 SQL Injection via symbol Parameter (CVSS 7.1)
- [CVE-2020-37106](https://cve.now/CVE-2020-37106.md): Business Live Chat Software 1.0 - Cross-Site Request Forgery (Add Admin) (CVSS 5.1)
- [CVE-2026-1600](https://cve.now/CVE-2026-1600.md): Bdtask Bhojon All-In-One Restaurant Management System Add-to-Cart Submission Endpoint addtocart logic error (CVSS 5.3)
- [CVE-2026-1599](https://cve.now/CVE-2026-1599.md): Bdtask Bhojon All-In-One Restaurant Management System Checkout placeorder logic error (CVSS 5.3)
- [CVE-2026-1598](https://cve.now/CVE-2026-1598.md): Bdtask Bhojon All-In-One Restaurant Management System User Information profile cross site scripting (CVSS 5.1)
- [CVE-2026-1597](https://cve.now/CVE-2026-1597.md): Bdtask SalesERP Administrative Endpoint improper authorization (CVSS 5.3)
- [CVE-2025-40679](https://cve.now/CVE-2025-40679.md): HTML injection in Isshue from Bdtask (CVSS 5.1)
- [CVE-2021-47769](https://cve.now/CVE-2021-47769.md): Isshue Shopping Cart 3.5 - 'Title' Cross Site Scripting (XSS) (CVSS 5.1)
- [CVE-2025-13239](https://cve.now/CVE-2025-13239.md): Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit\_checkout behavioral workflow (CVSS 5.3)
- [CVE-2025-13238](https://cve.now/CVE-2025-13238.md): Bdtask Flight Booking Software Edit Profile edit unrestricted upload (CVSS 5.3)
- [CVE-2025-13186](https://cve.now/CVE-2025-13186.md): Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution manage\_customer cross site scripting (CVSS 4.8)
- [CVE-2025-13185](https://cve.now/CVE-2025-13185.md): Bdtask/CodeCanyon News365 profile unrestricted upload (CVSS 5.1)
- [CVE-2025-13180](https://cve.now/CVE-2025-13180.md): Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System edit\_profile cross site scripting (CVSS 5.1)
- [CVE-2025-13179](https://cve.now/CVE-2025-13179.md): Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System cross-site request forgery (CVSS 5.3)
- [CVE-2025-13178](https://cve.now/CVE-2025-13178.md): Bdtask/CodeCanyon SalesERP User Profile edit\_profile cross site scripting (CVSS 5.1)
- [CVE-2025-13177](https://cve.now/CVE-2025-13177.md): Bdtask/CodeCanyon SalesERP cross-site request forgery (CVSS 5.3)
- [CVE-2025-12288](https://cve.now/CVE-2025-12288.md): Bdtask Pharmacy Management System User Profile edit\_user authorization (CVSS 5.3)
- [CVE-2025-12287](https://cve.now/CVE-2025-12287.md): Bdtask Wholesale Inventory Control and Inventory Management System edit\_profile sql injection (CVSS 5.1)
- [CVE-2025-12223](https://cve.now/CVE-2025-12223.md): Bdtask Flight Booking Software Package Information package-information unrestricted upload (CVSS 5.3)
- [CVE-2025-12222](https://cve.now/CVE-2025-12222.md): Bdtask Flight Booking Software Deposit deposit unrestricted upload (CVSS 5.3)
- [CVE-2024-3151](https://cve.now/CVE-2024-3151.md): Bdtask Multi-Store Inventory Management System Stock Movement Page cross-site request forgery (CVSS 4.3)
- [CVE-2024-2998](https://cve.now/CVE-2024-2998.md): Bdtask Multi-Store Inventory Management System Store Update Page cross site scripting (CVSS 2.4)
- [CVE-2024-2997](https://cve.now/CVE-2024-2997.md): Bdtask Multi-Store Inventory Management System cross site scripting (CVSS 2.4)
- [CVE-2024-2996](https://cve.now/CVE-2024-2996.md): Bdtask Multi-Store Inventory Management System Page Title cross site scripting (CVSS 2.4)
- [CVE-2024-2639](https://cve.now/CVE-2024-2639.md): Bdtask Wholesale Inventory Management System session fixiation (CVSS 4.3)
- [CVE-2024-2317](https://cve.now/CVE-2024-2317.md): Bdtask Hospital AutoManager Prescription Page improper authorization (CVSS 3.8)
- [CVE-2024-2316](https://cve.now/CVE-2024-2316.md): Bdtask Hospital AutoManager Update Bill Page cross-site request forgery (CVSS 4.3)
- [CVE-2024-2277](https://cve.now/CVE-2024-2277.md): Bdtask G-Prescription Gynaecology & OBS Consultation Software Password Reset change\_password\_save cross-site request forgery (CVSS 4.3)
- [CVE-2024-2276](https://cve.now/CVE-2024-2276.md): Bdtask G-Prescription Gynaecology & OBS Consultation Software Edit Venue Page cross site scripting (CVSS 2.4)
- [CVE-2024-2275](https://cve.now/CVE-2024-2275.md): Bdtask G-Prescription Gynaecology & OBS Consultation Software OBS Patient/Gynee Prescription cross site scripting (CVSS 2.4)
- [CVE-2024-2274](https://cve.now/CVE-2024-2274.md): Bdtask G-Prescription Gynaecology & OBS Consultation Software Prescription Dashboard Index cross site scripting (CVSS 2.4)
- [CVE-2024-2135](https://cve.now/CVE-2024-2135.md): Bdtask Hospita AutoManager Hospital Activities Page form cross site scripting (CVSS 2.4)
- [CVE-2024-2134](https://cve.now/CVE-2024-2134.md): Bdtask Hospita AutoManager Investigation Report cross-site request forgery (CVSS 4.3)
- [CVE-2024-2133](https://cve.now/CVE-2024-2133.md): Bdtask Isshue Multi Store eCommerce Shopping Cart Solution Manage Sale Page manage\_invoice cross site scripting (CVSS 2.4)
- [CVE-2024-1749](https://cve.now/CVE-2024-1749.md): Bdtask Bhojon Best Restaurant Management Software Message Page message cross site scripting (CVSS 2.4)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/bdtask
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.