CVE-2020-15597

Description

References

• sevenlayers.com/index.php/364-soplanning-v1-46-01-xss-session-hijack · Exploit
• soplanning.org · Product

Mais vulnerabilidades de soplanning

• CVE-2025-62731MÉDIO 4.8SOPlanning is vulnerable to Stored XSS in /feries endpoint. Malicious attacker with access to public holidays feature is able to inject arbi…
• CVE-2025-62730ALTO 8.8SOPlanning is vulnerable to Privilege Escalation in user management tab. Users with user_manage_team role are allowed to modify permissions …
• CVE-2025-62729MÉDIO 5.4SOPlanning is vulnerable to Stored XSS in /status endpoint. Malicious attacker with an account can inject arbitrary HTML and JS into website…
• CVE-2025-62297MÉDIO 5.4SOPlanning is vulnerable to Stored XSS in /projets endpoint. Malicious attacker with medium privileges can inject arbitrary HTML and JS into…
• CVE-2025-62296MÉDIO 5.4SOPlanning is vulnerable to Stored XSS in /taches endpoint. Malicious attacker with medium privileges can inject arbitrary HTML and JS into …