Beveiligingsadvies

CVE-2025-62297

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-11-20 15:43:56

Laatst bijgewerkt 2025-11-20 21:24:11

Toegewezen door CERT-PL

CVSS-score 5.1

Status PUBLISHED

Beschrijving

SOPlanning is vulnerable to Stored XSS in /projets endpoint. Malicious attacker with medium privileges can inject arbitrary HTML and JS into website, which will be rendered/executed when opening edited page. This issue was fixed in version 1.55.

← Alle CVE's bekijken Bekijk op cve.org ↗