Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

trainingbusinesspros Vulnerabilities & CVE List (Oct 2026)

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-109221`Groundhogg <= 4.9.3 - Authenticated (Sales Representative+) Arbitrary File Deletion via CSV Import 'copy_file' Field Mapping	Exploitation statusNot exploited	FixYes	Affected productGroundhogg — CRM, Newsletters, and Marketing Automation	Published10/16/2026	SeverityHigh
`CVE-2026-18548`Groundhogg <= 4.5.14 - Unauthenticated Stored Cross-Site Scripting via 'ref' Parameter	Exploitation statusNot exploited	FixYes	Affected productGroundhogg — CRM, Newsletters, and Marketing Automation
`CVE-2026-92975`Groundhogg <= 4.8.3 - Unauthenticated Privilege Escalation to Support User Identity Confusion	Exploitation statusNot exploited	FixYes	Affected productGroundhogg — CRM, Newsletters, and Marketing Automation
`CVE-2026-104725`Groundhogg <= 4.9 - Authenticated (Custom+) Privilege Escalation to 'user' Parameter	Exploitation statusNot exploited	FixYes	Affected productGroundhogg — CRM, Newsletters, and Marketing Automation
`CVE-2026-97644`Groundhogg <= 4.9 - Authenticated (Sales Person+) Privilege Escalation via Contact Identity Rebinding leading to Administrator Account Takeover to 'user_id' Parameter (v3 /contacts) chained with v4 /emails/test	Exploitation statusNot exploited	FixYes	Affected productGroundhogg — CRM, Newsletters, and Marketing Automation
`CVE-2026-18387`Groundhogg <= 4.5.14 - Authenticated (Vendor+) SQL Injection via 'tag_query' Parameter	Exploitation statusNot exploited	FixYes	Affected productGroundhogg — CRM, Newsletters, and Marketing Automation
`CVE-2026-11454`Groundhogg — CRM, Newsletters, and Marketing Automation <= 4.5.2 - Insecure Direct Object Reference	Exploitation statusNot exploited	FixYes	Affected productGroundhogg — CRM, Newsletters, and Marketing Automation
`CVE-2026-14029`Groundhogg <= 4.5.8 - Authenticated (Custom+) SQL Injection via 'select' Parameter	Exploitation statusNot exploited	FixYes	Affected productGroundhogg — CRM, Newsletters, and Marketing Automation
`CVE-2026-13333`Groundhogg <= 4.5.5 - Authenticated (Sales Rep+) SQL Injection via 'query[select]' Parameter	Exploitation statusNot exploited	FixYes	Affected productGroundhogg — CRM, Newsletters, and Marketing Automation
`CVE-2026-13331`Groundhogg <= 4.5.5 - Authenticated (Marketer+) SQL Injection via 'search' Parameter	Exploitation statusNot exploited	FixYes	Affected productGroundhogg — CRM, Newsletters, and Marketing Automation

22 Results | Page 1 of 3

Security vulnerabilities from trainingbusinesspros

trainingbusinesspros

How many security vulnerabilities does trainingbusinesspros have?

Which trainingbusinesspros product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular trainingbusinesspros products