CVE-2025-52203

A stored cross-site scripting (XSS) vulnerability exists in DevaslanPHP project-management v1.2.4 within the Ticket Name field. The flaw is caused by a failure to properly sanitize user-supplied input, allowing an authenticated attacker to inject malicious JavaScript payloads into the database. T...