CVE-2025-62729 in SOPlanninginformación

Resumen

por MITRE • 2025-11-20

SOPlanning is vulnerable to Stored XSS in /status endpoint. Malicious attacker with an account can inject arbitrary HTML and JS into website, which will be rendered/executed when opening multiple pages.

This issue was fixed in version 1.55.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Responsable

CERT-PL

Reservar

2025-10-21

Divulgación

2025-11-20

Moderación

aceptado

Artículo

VDB-333076

CPE

listo

EPSS

0.00164

KEV

no

Actividades

muy bajo

Fuentes

Want to stay up to date on a daily basis?

Enable the mail alert feature now!