Skip to contentSoplanning Soplanning vulnerabilities
- soplanningSQL Injection in SOPlanning Audit Retention ConfigurationCVE-2026-506448.6 High
- soplanningCross-Site Request Forgery in SOPlanningCVE-2026-405495.1 Medium
- soplanningUnrestricted Upload of File with Dangerous Type in SOPlanningCVE-2026-405486.4 Medium
- soplanningPath Traversal in SOPlanningCVE-2026-405476.4 Medium
- soplanningMultiple SQL Injections in SOPlanningCVE-2026-405468.7 High
- soplanningReflected XSS in SOPlanningCVE-2026-405455.1 Medium
- soplanningStored XSS in SOPlanningCVE-2026-405445.1 Medium
- soplanningMissing Authorization in SOPlanningCVE-2026-405438.8 High
- soplanningStored XSS in SOPlanningCVE-2025-627315.1 Medium
- soplanningPrivilege Escalation via Incorrect Authorization in SOPlanningCVE-2025-627308.7 High
- soplanningStored XSS in SOPlanningCVE-2025-627295.1 Medium
- soplanningStored XSS in SOPlanningCVE-2025-622975.1 Medium
- soplanningStored XSS in SOPlanningCVE-2025-622965.1 Medium
- soplanningStored XSS in SOPlanningCVE-2025-622955.1 Medium
- soplanningPredictable Generation of Password Recovery TokenCVE-2025-622948.7 High
- soplanningBroken Access Control in SOPlanningCVE-2025-622935.3 Medium
- soplanningCross-Site Scripting (XSS) in SOPlanningCVE-2025-410015.1 Medium
- soplanningSOPlanning 1.53.00 is vulnerable to a directory traversal issue in /process/upload.php. The ...CVE-2024-571706.5 Medium
- soplanningA file upload bypass vulnerability exists in SOPlanning 1.53.00, specifically in /process/upload...CVE-2024-571699.8 Critical
- soplanningSQL Injection vulnerability in SOPlanningCVE-2024-95749.8 Critical
- soplanningSQL Injection vulnerability in SOPlanningCVE-2024-95736.3 Medium
- soplanningCross-Site Scripting vulnerability in SOPlanningCVE-2024-95726.3 Medium
- soplanningCross-Site Scripting vulnerability in SOPlanningCVE-2024-95716.3 Medium
- simple online planning so planning, soplanning +1 moreRemote Code Execution through File Upload in SOPlanning before 1.52.02CVE-2024-27115Public exploit10.0 Critical
- simple online planning so planning, soplanning, so planning simple online planning +2 moreRemote Code Execution through File Upload in SOPlanning before 1.52.02CVE-2024-271148.9 High
- simple online planning so planning, soplanning +1 moreInsecure Direct Object Reference to export Database in SOPlanning before 1.52.02CVE-2024-271139.3 Critical
- simple online planning so planning, soplanning +1 moreSQL Injection in SOPlanning before 1.52.02CVE-2024-271129.3 Critical
- soplanningSOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and...CVE-2020-139639.8 Critical
- soplanningSoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings....CVE-2020-25867Public exploit5.3 Medium
- soplanningSOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment,...CVE-2020-155975.4 Medium
- soplanningSOPlanning 1.45 allows XSS via the "Your SoPlanning url" field.CVE-2020-93385.4 Medium
- soplanningSOPlanning 1.45 allows XSS via the Name or Comment to status.php.CVE-2020-93395.4 Medium
- soplanningSOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary changing of the admin...CVE-2020-92666.5 Medium
- soplanningSOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary user creation via...CVE-2020-92676.5 Medium
- soplanningSoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the...CVE-2020-92687.5 High
- soplanningSOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via...CVE-2020-92697.2 High
- soplanningSOPlanning 1.45 has SQL injection via the user_list.php "by" parameter.CVE-2019-201798.8 High
- soplanningMultiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php,...CVE-2014-8673Public exploitEPSS 11.9%9.8 Critical
- soplanningMultiple Cross-Site Scripting (XSS) vulnerabilities exist in Simple Online Planning (SOPlanning)...CVE-2014-8674Public exploit5.4 Medium
- soplanningThe installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a...CVE-2014-8677Public exploit5.3 Medium
- soplanningDirectory traversal vulnerability in the file_get_contents function in SOPlanning 1.32 and...CVE-2014-8676Public exploitEPSS 39.9%5.3 Medium
- soplanningSoplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login...CVE-2014-8675Public exploitEPSS 12.5%7.5 High