Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-19966

CodeCanyon TimeCamp Integration for CRM Contact Information Update save_contact authorization

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save_contact of the component Contact Information Update. Such manipulation of the argument contact_id leads to authorization bypass. The attack can be launched remotely. The exploit is publicly available and might be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CodeCanyon TimeCamp Integration for CRM

  • 2.0affected
  • 2.1affected
  • 2.2affected
  • 2.3affected
  • 2.4affected
  • 2.5affected
  • 2.6affected
  • 2.7affected
  • 2.8affected

References