24706 matches found
CVE-2025-62729 Stored XSS in SOPlanning
SOPlanning is vulnerable to Stored XSS in /status endpoint. Malicious attacker with an account can inject arbitrary HTML and JS into website, which will be rendered/executed when opening multiple pages. This issue was fixed in version 1.55...
CVE-2025-62729 Stored XSS in SOPlanning
SOPlanning is vulnerable to Stored XSS in /status endpoint. Malicious attacker with an account can inject arbitrary HTML and JS into website, which will be rendered/executed when opening multiple pages. This issue was fixed in version 1.55...
EUVD-2025-198311
SOPlanning is vulnerable to Broken Access Control in /status endpoint. Due to lack of permission checks in Project Status functionality an authenticated attacker is able to add, edit and delete any status. This issue was fixed in version 1.55...
CVE-2025-62293 Broken Access Control in SOPlanning
SOPlanning is vulnerable to Broken Access Control in /status endpoint. Due to lack of permission checks in Project Status functionality an authenticated attacker is able to add, edit and delete any status. This issue was fixed in version 1.55...
CVE-2025-62293
SOPlanning is affected by Broken Access Control in the /status endpoint due to missing permission checks in Project Status functionality. An authenticated attacker can add, edit, or delete statuses. A fix is available in version 1.55. The CVE-entry is supported by Red Hat and EU vulnerability ref...
CVE-2025-62293 Broken Access Control in SOPlanning
SOPlanning is vulnerable to Broken Access Control in /status endpoint. Due to lack of permission checks in Project Status functionality an authenticated attacker is able to add, edit and delete any status. This issue was fixed in version 1.55...
CVE-2025-65222
creationtimestamp| type| source ---|---|--- 2025-11-20 15:10:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115582661903555688...
CVE-2019-19822
creationtimestamp| type| source ---|---|--- 2025-11-20 11:49:58+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-19822.yaml 2025-11-21 21:02:47+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m666lbcxs22j...
CVE-2025-13433
creationtimestamp| type| source ---|---|--- 2025-11-20 03:59:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5zuwvv6qz2n...
PT-2025-47598
Name of the Vulnerable Software and Affected Versions SOPlanning versions prior to 1.55 Description SOPlanning is susceptible to a Stored Cross-Site Scripting XSS issue within the /status endpoint. An attacker possessing an account can inject arbitrary HTML and JavaScript code into the website...
SOPlanning 安全漏洞
SOPlanning is a suite of online project management software from SOPlanning, Inc. A security vulnerability exists in SOPlanning versions prior to 1.55, which stems from a lack of permission checking in the /status endpoint that could lead to improper access control...
SOPlanning 跨站脚本漏洞
SOPlanning is a suite of online project management software from SOPlanning, Inc. A cross-site scripting vulnerability exists in SOPlanning versions prior to 1.55, which stems from the /status endpoint that does not properly clean inputs, and could lead to stored cross-site scripting...
PT-2025-47593
Name of the Vulnerable Software and Affected Versions SOPlanning versions prior to 1.55 Description SOPlanning is susceptible to a Broken Access Control issue in the /status endpoint. Insufficient permission checks within the Project Status functionality allow an authenticated attacker to modify...
CVE-2023-41348
creationtimestamp| type| source ---|---|--- 2025-11-19 21:59:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115578606002979278 2025-11-19 22:00:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115578608301178805 2025-11-20 21:02:47+00:00| seen|...
CVE-2023-41345
creationtimestamp| type| source ---|---|--- 2025-11-19 21:59:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115578606002979278 2025-11-19 22:00:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115578608301178805 2025-11-20 08:08:05+00:00| seen|...
GCVE-1-2025-0018
creationtimestamp| type| source ---|---|--- 2025-11-19 19:24:11+00:00| seen| https://social.circl.lu/users/circl/statuses/115577995327441441...
CVE-2025-65025
creationtimestamp| type| source ---|---|--- 2025-11-19 19:08:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5yxb4sbgn2k...
GHSA-5HHX-V7F6-X7GV
creationtimestamp| type| source ---|---|--- 2025-11-19 17:41:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115577592659326077...
CVE-2025-13400
creationtimestamp| type| source ---|---|--- 2025-11-19 17:21:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115577514792992435 2025-11-19 19:44:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5yzcakg7r2q...