Soplanning vulnerabilities

Products

• Soplanning 42

Newest

• soplanning SQL Injection in SOPlanning Audit Retention Configuration CVE-2026-50644 8.6 HighJuly 9, 2026
• soplanning Cross-Site Request Forgery in SOPlanning CVE-2026-40549 5.1 MediumJune 1, 2026
• soplanning Unrestricted Upload of File with Dangerous Type in SOPlanning CVE-2026-40548 6.4 MediumJune 1, 2026
• soplanning Path Traversal in SOPlanning CVE-2026-40547 6.4 MediumJune 1, 2026
• soplanning Multiple SQL Injections in SOPlanning CVE-2026-40546 8.7 HighJune 1, 2026
• soplanning Reflected XSS in SOPlanning CVE-2026-40545 5.1 MediumJune 1, 2026
• soplanning Stored XSS in SOPlanning CVE-2026-40544 5.1 MediumJune 1, 2026
• soplanning Missing Authorization in SOPlanning CVE-2026-40543 8.8 HighJune 1, 2026
• soplanning Stored XSS in SOPlanning CVE-2025-62731 5.1 MediumNovember 20, 2025
• soplanning Privilege Escalation via Incorrect Authorization in SOPlanning CVE-2025-62730 8.7 HighNovember 20, 2025
• soplanning Stored XSS in SOPlanning CVE-2025-62729 5.1 MediumNovember 20, 2025
• soplanning Stored XSS in SOPlanning CVE-2025-62297 5.1 MediumNovember 20, 2025
• soplanning Stored XSS in SOPlanning CVE-2025-62296 5.1 MediumNovember 20, 2025
• soplanning Stored XSS in SOPlanning CVE-2025-62295 5.1 MediumNovember 20, 2025
• soplanning Predictable Generation of Password Recovery Token CVE-2025-62294 8.7 HighNovember 20, 2025
• soplanning Broken Access Control in SOPlanning CVE-2025-62293 5.3 MediumNovember 20, 2025
• soplanning Cross-Site Scripting (XSS) in SOPlanning CVE-2025-41001 5.1 MediumNovember 10, 2025
• soplanning SOPlanning 1.53.00 is vulnerable to a directory traversal issue in /process/upload.php. The ... CVE-2024-57170 6.5 MediumMarch 18, 2025
• soplanning A file upload bypass vulnerability exists in SOPlanning 1.53.00, specifically in /process/upload... CVE-2024-57169 9.8 CriticalMarch 18, 2025
• soplanning SQL Injection vulnerability in SOPlanning CVE-2024-9574 9.8 CriticalOctober 7, 2024
• soplanning SQL Injection vulnerability in SOPlanning CVE-2024-9573 6.3 MediumOctober 7, 2024
• soplanning Cross-Site Scripting vulnerability in SOPlanning CVE-2024-9572 6.3 MediumOctober 7, 2024
• soplanning Cross-Site Scripting vulnerability in SOPlanning CVE-2024-9571 6.3 MediumOctober 7, 2024
• simple online planning so planning, soplanning +1 more Remote Code Execution through File Upload in SOPlanning before 1.52.02 CVE-2024-27115 Public exploit 10.0 CriticalSeptember 11, 2024
• simple online planning so planning, soplanning, so planning simple online planning +2 more Remote Code Execution through File Upload in SOPlanning before 1.52.02 CVE-2024-27114 8.9 HighSeptember 11, 2024
• simple online planning so planning, soplanning +1 more Insecure Direct Object Reference to export Database in SOPlanning before 1.52.02 CVE-2024-27113 9.3 CriticalSeptember 11, 2024
• simple online planning so planning, soplanning +1 more SQL Injection in SOPlanning before 1.52.02 CVE-2024-27112 9.3 CriticalSeptember 11, 2024
• soplanning SOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and... CVE-2020-13963 9.8 CriticalMarch 21, 2021
• soplanning SoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings.... CVE-2020-25867 Public exploit 5.3 MediumOctober 7, 2020
• soplanning SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment,... CVE-2020-15597 5.4 MediumAugust 11, 2020
• soplanning SOPlanning 1.45 allows XSS via the "Your SoPlanning url" field. CVE-2020-9338 5.4 MediumFebruary 22, 2020
• soplanning SOPlanning 1.45 allows XSS via the Name or Comment to status.php. CVE-2020-9339 5.4 MediumFebruary 22, 2020
• soplanning SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary changing of the admin... CVE-2020-9266 6.5 MediumFebruary 18, 2020
• soplanning SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary user creation via... CVE-2020-9267 6.5 MediumFebruary 18, 2020
• soplanning SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the... CVE-2020-9268 7.5 HighFebruary 18, 2020
• soplanning SOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via... CVE-2020-9269 7.2 HighFebruary 18, 2020
• soplanning SOPlanning 1.45 has SQL injection via the user_list.php "by" parameter. CVE-2019-20179 8.8 HighJanuary 9, 2020
• soplanning Multiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php,... CVE-2014-8673 Public exploit EPSS 11.9% 9.8 CriticalJanuary 7, 2020
• soplanning Multiple Cross-Site Scripting (XSS) vulnerabilities exist in Simple Online Planning (SOPlanning)... CVE-2014-8674 Public exploit 5.4 MediumJanuary 6, 2020
• soplanning The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a... CVE-2014-8677 Public exploit 5.3 MediumAugust 31, 2017
• soplanning Directory traversal vulnerability in the file_get_contents function in SOPlanning 1.32 and... CVE-2014-8676 Public exploit EPSS 39.9% 5.3 MediumAugust 31, 2017
• soplanning Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login... CVE-2014-8675 Public exploit EPSS 12.5% 7.5 HighAugust 31, 2017