Browse CVEs

MEDIUM 5.4 CVE-2025-41001 Cross Site Scripting (XSS) vulnerability stored in SOPlanning v1.53.02, which consist of a stored XSS due to a lack of proper validation of user inpu… Soplanning Mitigation only Fix from $1,6002025-11-10 CRITICAL 9.8 CVE-2024-57169 A file upload bypass vulnerability exists in SOPlanning 1.53.00, specifically in /process/upload.php. This vulnerability allows remote attackers to b… Soplanning No fix yet Fix from $2,3002025-03-18 MEDIUM 6.5 CVE-2024-57170 SOPlanning 1.53.00 is vulnerable to a directory traversal issue in /process/upload.php. The "fichier_to_delete" parameter allows authenticated attack… Soplanning No fix yet Fix from $1,6002025-03-18 MEDIUM 5.4 CVE-2020-9338 SOPlanning 1.45 allows XSS via the "Your SoPlanning url" field. Soplanning No fix yet Fix from $1,6002020-02-22 MEDIUM 5.4 CVE-2020-9339 SOPlanning 1.45 allows XSS via the Name or Comment to status.php. Soplanning No fix yet Fix from $1,6002020-02-22 HIGH 7.5 CVE-2020-9268 SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nom_createur&by= substring. Soplanning No fix yet Fix from $1,9502020-02-18 HIGH 7.2 CVE-2020-9269 SOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via the users parameter, as demonstrated by export_ical.… Soplanning No fix yet Fix from $1,9502020-02-18 MEDIUM 6.5 CVE-2020-9266 SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary changing of the admin password via process/xajax_server.php. Soplanning No fix yet Fix from $1,6002020-02-18 MEDIUM 6.5 CVE-2020-9267 SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary user creation via process/xajax_server.php. Soplanning No fix yet Fix from $1,6002020-02-18