Volerion logoVolerion
Volerion logoVolerion

SOPlanning Stored Cross-Site Scripting Vulnerability in Status Endpoint

Vulnerability

A stored cross-site scripting vulnerability has been identified in the SOPlanning web application, specifically within the status endpoint. This issue allows authenticated attackers to inject arbitrary HTML and JavaScript, which is then executed when the affected pages are accessed. The vulnerability exists in all versions prior to 1.55.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the affected page.

Remediation

Users can upgrade to SOPlanning version 1.55 or later to address this vulnerability.

Added: Nov 20, 2025, 4:20 PM
Updated: Nov 20, 2025, 4:20 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
1.7
exploitability
3.0
remediation
7.7
relevance
1.1
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.