Log in Start free

Vulnerability · Published Nov 14, 2025 · Assigned by VulDB

CVE-2025-13179Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System cross-site request forgery

Medium 4.3

In plain English

A medium-severity cross-site request forgery in Wholesale Inventory Control and Inventory Management System from Bdtask. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.2%top 84.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 20250320. This issue affects some unknown processing. Such manipulation leads to cross-site request forgery. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

VendorProductVersions
Bdtask Wholesale Inventory Control and Inventory Management System 20250320
CodeCanyon Wholesale Inventory Control and Inventory Management System 20250320

Weakness: CWE-352, CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

References