agentprime: projectsendEvery new CVE for projectsend.https://agentprime.io/CVE-2026-116136: ProjectSend 2.0.0 through 2.7.1 Incorrect Authorization via File Version Linkinghttps://agentprime.io/advisories/CVE-2026-116136/https://agentprime.io/advisories/CVE-2026-116136/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 11:51:01 GMTCVECVE-2026-112003: ProjectSend 2.0.0 before 2.7.0 Path Validation Bypass via Orphan File Import/Deletehttps://agentprime.io/advisories/CVE-2026-112003/https://agentprime.io/advisories/CVE-2026-112003/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 11:38:27 GMTCVECVE-2026-112002: ProjectSend 2.5.0 before 2.7.0 Unverified Password Change via /settings/passwordhttps://agentprime.io/advisories/CVE-2026-112002/https://agentprime.io/advisories/CVE-2026-112002/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 11:38:27 GMTCVECVE-2026-112001: ProjectSend 2.0.0 before 2.7.0 Incorrect Authorization via Users API Token Abilitieshttps://agentprime.io/advisories/CVE-2026-112001/https://agentprime.io/advisories/CVE-2026-112001/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 11:38:26 GMTCVECVE-2026-53992: Reflected XSS in ProjectSend thumbnails-regenerate.php via start_date / end_date Parametershttps://agentprime.io/advisories/CVE-2026-53992/https://agentprime.io/advisories/CVE-2026-53992/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 14:54:41 GMTCVECVE-2021-47947: Projectsend r1295 Stored Cross-Site Scripting via files-edit.phphttps://agentprime.io/advisories/CVE-2021-47947/https://agentprime.io/advisories/CVE-2021-47947/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 10 May 2026 12:44:04 GMTCVECVE-2026-5624: ProjectSend upload.php cross-site request forgeryhttps://agentprime.io/advisories/CVE-2026-5624/https://agentprime.io/advisories/CVE-2026-5624/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 05:00:19 GMTCVECVE-2026-4045: projectsend Auth.php response discrepancyhttps://agentprime.io/advisories/CVE-2026-4045/https://agentprime.io/advisories/CVE-2026-4045/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Mar 2026 16:02:07 GMTCVECVE-2026-4044: projectsend Delete import-orphans.php realpath path traversalhttps://agentprime.io/advisories/CVE-2026-4044/https://agentprime.io/advisories/CVE-2026-4044/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Mar 2026 15:32:11 GMTCVECVE-2026-3977: projectsend AJAX Endpoints authorizationhttps://agentprime.io/advisories/CVE-2026-3977/https://agentprime.io/advisories/CVE-2026-3977/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Mar 2026 03:02:08 GMTCVECVE-2023-53980: ProjectSend r1605 Remote Code Execution via File Extension Manipulationhttps://agentprime.io/advisories/CVE-2023-53980/https://agentprime.io/advisories/CVE-2023-53980/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 22 Dec 2025 21:35:36 GMTCVECVE-2023-53930: ProjectSend r1605 Insecure Direct Object Reference File Download Vulnerabilityhttps://agentprime.io/advisories/CVE-2023-53930/https://agentprime.io/advisories/CVE-2023-53930/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Dec 2025 22:44:57 GMTCVECVE-2023-53906: ProjectSend r1605 Stored Cross-Site Scripting via Custom Assets Pagehttps://agentprime.io/advisories/CVE-2023-53906/https://agentprime.io/advisories/CVE-2023-53906/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Dec 2025 22:44:45 GMTCVECVE-2023-53905: ProjectSend r1605 CSV Injection via User Account Export Functionalityhttps://agentprime.io/advisories/CVE-2023-53905/https://agentprime.io/advisories/CVE-2023-53905/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Dec 2025 22:44:44 GMTCVECVE-2025-13232: projectsend File Editor/Custom Download Aliases cross site scriptinghttps://agentprime.io/advisories/CVE-2025-13232/https://agentprime.io/advisories/CVE-2025-13232/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 16 Nov 2025 01:02:07 GMTCVECVE-2024-11680: ProjectSend Unauthenticated Configuration Modificationhttps://agentprime.io/advisories/CVE-2024-11680/https://agentprime.io/advisories/CVE-2024-11680/CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 3 Dec 2024: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.92 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 Nov 2024 09:55:23 GMTCVEcriticalKEVCVE-2024-7659: projectsend Password Reset Token functions.php generate_random_string random valueshttps://agentprime.io/advisories/CVE-2024-7659/https://agentprime.io/advisories/CVE-2024-7659/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Aug 2024 02:31:04 GMTCVECVE-2024-7658: projectsend process.php get_preview resource injectionhttps://agentprime.io/advisories/CVE-2024-7658/https://agentprime.io/advisories/CVE-2024-7658/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Aug 2024 02:00:07 GMTCVECVE-2017-20101: ProjectSend information disclosurehttps://agentprime.io/advisories/CVE-2017-20101/https://agentprime.io/advisories/CVE-2017-20101/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jun 2022 13:25:21 GMTCVE