CVE-2025-55203

Plane is an open‑source project management tool. A stored XSS vulnerability exists in the description_html field prior to version 0.28.0, where unsanitized/uncleaned input allows attacker‑provided JavaScript to be saved in the database and executed in other users’ browsers. Impacts include potent...

Plane 跨站脚本漏洞

Plane is an open source, self-hosted project planning tool from Plane Open Source. A cross-site scripting vulnerability exists in Plane versions prior to 0.28.0, which stems from an insufficiently cleaned and escaped descriptionhtml field that could lead to a stored cross-site scripting attack...