Bugs found in Workbooks SaaS
Workbooks.com is a robust and customizable platform providing integrated CRM, marketing automation, order management, invoicing, helpdesk, and more. Targeted at small to mid-sized businesses, it offers flexible tools that streamline operations and drive efficiency.
During our Bug Crawl, QAwerk uncovered multiple issues that could impede optimal performance and user experience. Our short evaluation revealed system vulnerabilities that could impact critical business workflows if left unresolved.
Below, we share the most notable findings and recommend steps for improvement.
The “+” symbol in the email field on the sign-in page is replaced with “%2B” and further altered to “%252B”
Severity:
Major
Precondition:
The user is on the Sign In page.
Steps to Reproduce:
- Enter an email address with a “+” (e.g., [email protected]).
- Enter a password and attempt to sign in.
- Observe the email field after the failed attempt.
- Try logging in again.
Environment:
Windows 10
Browsers: Chrome 127.0.6533.89, Firefox 128.0.3, Edge 127.0.2651.86
Actual Result:
The “+” becomes “%2B” after the first attempt.
The “%” in “%2B” turns into “%25,” resulting in “%252B” after the second attempt.
Expected Result:
The “+” symbol should remain unaltered throughout all login attempts.
Error occurs when reusing the current password during password recovery
Severity:
Major
Precondition:
The user has a set password (e.g., “Qwertyuiop123456789”).
Steps to Reproduce:
- Register with “Qwertyuiop123456789.”
- Log out.
- Click “Forgot Password” on the Sign In page.
- Open the recovery email and follow the link.
- Enter “Qwertyuiop123456789” as the new password.
Environment:
Windows 10
Browsers: Chrome 127.0.6533.89, Firefox 128.0.3, Edge 127.0.2651.86
Actual Result:
The process fails, displaying an error preventing completion.
Expected Result:
If reusing an old password is not allowed, the system should provide a clear message.
If reusing is permitted, the process should be completed without errors.
Reordered tabs in “My Springboard” are not updating dynamically
Severity:
Major
Precondition:
- The user is logged in.
- A demonstrational database is available.
Steps to Reproduce:
- Log into the app.
- Open the demonstrational database.
- Click the gear icon for “My Springboard.”
- Select “Items.”
- Move the last item to the front.
- Click “Save.”
Environment:
Windows 10
Browsers: Chrome 127.0.6533.89, Firefox 128.0.3, Edge 127.0.2651.86
Actual Result:
The order doesn’t change on the main page until a refresh is performed.
Expected Result:
The new tab order should appear immediately upon saving.
Persistent “Your username or password was not recognized” error after reopening the tab
Severity:
Minor
Precondition:
The user is on the Sign In page.
Steps to Reproduce:
- Enter invalid credentials.
- Click “Sign In” and note the error message.
- Close the tab.
- Open a new tab and revisit the Sign In page.
Environment:
Windows 10
Browsers: Chrome 127.0.6533.89, Firefox 128.0.3, Edge 127.0.2651.86
Actual Result:
The error message reappears, even in a fresh tab.
Expected Result:
The Sign In page should reset to a default state with no error message.
Password requirements not shown upfront during password recovery
Severity:
Minor
Precondition:
The user knows registration password rules (14+ chars, must include uppercase, lowercase, and digits).
Steps to Reproduce:
- Register a new account (adhering to password rules).
- Log out.
- Click “Forgot Password.”
- Use the link from the recovery email.
- Attempt to set a password that is missing certain requirements.
Environment:
Windows 10
Browsers: Chrome 127.0.6533.89, Firefox 128.0.3, Edge 127.0.2651.86
Actual Result:
Users only see an error after entering an invalid password; requirements are not stated beforehand.
Expected Result:
Display password rules on the recovery page, guiding users during registration.
No Web Notifications dialog on initial login in Firefox and Edge
Severity:
Minor
Precondition:
- Existing user account.
- Updated Firefox browser (also tested on Edge).
Steps to Reproduce:
- Open the application in Firefox.
- Log in for the first time.
Environment:
Windows 10
Browsers: Chrome 127.0.6533.89, Firefox 128.0.3, Edge 127.0.2651.86
Actual Result:
No notification permission dialog appears post-login.
Expected Result:
Firefox/Edge should show the notification prompt, letting users permit or block notifications.
Timezone selection window closes automatically on page load in Firefox and Edge
Severity:
Minor
Precondition:
- The user has a valid account.
- Browsers: Firefox or Edge.
Steps to Reproduce:
- Log in to the account using Firefox or Edge.
- Observe the timezone selection window’s behavior.
Environment:
Windows 10
Browsers: Chrome 127.0.6533.89, Firefox 128.0.3, Edge 127.0.2651.86
Actual Result:
The timezone selection window briefly appears and then closes automatically, preventing user action.
Expected Result:
The timezone window should remain until the user selects a timezone or closes it manually.
I identified seven issues, ranging from minor UI quirks to major functional bugs, that could potentially affect app usability. Thorough functional and non-functional testing—across browsers and user scenarios—will be essential for maintaining Workbooks’ reliability and streamlining the experience.
