Security Advisory

CVE-2026-40545

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-01 09:03:53

Last updated 2026-06-01 13:03:07

Assigner CERT-PL

CVSS score not scored

State PUBLISHED

Description

SOPlanning is vulnerable to Reflected XSS via the taches parameter. An attacker can craft a malicious URL which, when opened by authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue affects SOPlanning version 1.55 and below.

← Browse all CVEs View on cve.org ↗