CVE-2025-52203

A stored cross-site scripting (XSS) vulnerability exists in DevaslanPHP project-management v1.2.4 . The flaw is located in the Ticket Name field , which fails to properly sanitize user-supplied input. An authenticated attacker can inject malicious JavaScript payloads that are stored in the databa...