Petpooja Munshi
6 CVEs affecting Petpooja Munshi. Latest disclosed: 2026-11-02. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-119736 | High | 8.2 | 2026-11-02 | Attendo (formerly Petpooja Payroll) Admin Android application version 3.0.13 and earlier contains a hard-coded credentials vulnerability that allows attackers… |
CVE-2026-119733 | High | 8.1 | 2026-11-02 | Munshi (by Petpooja) before 2026-07-07 contained a missing authorization vulnerability in its company deletion workflow at DELETE /api/companies/{company_id}… |
CVE-2026-119731 | High | 7.5 | 2026-11-02 | Munshi (by Petpooja) before 2026-06-30 contained a payment bypass vulnerability in its subscription payment webhook at POST /api/payment/order/webhook, which l… |
CVE-2026-119734 | Medium | 6.5 | 2026-11-02 | Munshi (by Petpooja) before 2026-06-17 contained a broken object level authorization vulnerability that allows authenticated attackers to access another user's… |
CVE-2026-119732 | Medium | 6.5 | 2026-11-02 | Munshi (by Petpooja) before 2026-07-28 contained a broken object level authorization vulnerability that allows authenticated sub-users to delete invoices belon… |
CVE-2026-119735 | Medium | 5.4 | 2026-11-02 | Munshi (by Petpooja) before 2026-07-13 contained a stored cross-site scripting vulnerability that allows authenticated users to inject malicious markup through… |