Volerion logoVolerion
Volerion logoVolerion

SOPlanning Stored Cross-Site Scripting Vulnerability in the Projects Endpoint

Vulnerability

A stored cross-site scripting vulnerability has been identified in SOPlanning, affecting all versions prior to 1.55. The issue resides in the '/projets' endpoint, where a malicious attacker with medium privileges can inject arbitrary HTML and JavaScript. This injected content is executed when the edited page is opened.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the page.

Remediation

Users can upgrade to SOPlanning version 1.55 or later to address this vulnerability.

Added: Nov 20, 2025, 4:20 PM
Updated: Nov 20, 2025, 4:20 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
1.7
exploitability
3.0
remediation
7.7
relevance
1.1
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.