72crm Wukong Crm — known CVE vulnerabilities

Every CVE whose affected-product data names 72crm Wukong Crm, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2022-37181 — CVSS 9.8 (critical): 72crm 9.0 has an Arbitrary file upload vulnerability.
• CVE-2022-37178 — CVSS 8.8 (high): An issue was discovered in 72crm 9.0. There is a SQL Injection vulnerability in View the task calendar.
• CVE-2022-46610 — CVSS 8.8 (high): 72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows…
• CVE-2025-6106 — CVSS 4.3 (medium): A vulnerability was found in WuKongOpenSource WukongCRM 9.0 and classified as problematic. This issue affects some unknown processing of…
• CVE-2025-5879 — CVSS 3.5 (low): A vulnerability, which was classified as problematic, was found in WuKongOpenSource WukongCRM 9.0. This affects an unknown part of the file…