Advisories · Technology

SOPlanning.

Every CVE that names SOPlanning among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-50644 CVE record

CVSS 8.6 High

SQL Injection in SOPlanning Audit Retention Configuration
- SOPlanning
- SQL injection
Not analysed yet 9 Jul 2026
CVE-2026-40549 CVE record

CVSS 5.1 Medium

Cross-Site Request Forgery in SOPlanning
- SOPlanning
- Cross-site request forgery (CSRF)
Not analysed yet 1 Jun 2026
CVE-2026-40548 CVE record

CVSS 6.4 Medium

Unrestricted Upload of File with Dangerous Type in SOPlanning
- SOPlanning
- Unrestricted file upload
Not analysed yet 1 Jun 2026
CVE-2026-40547 CVE record

CVSS 6.4 Medium

Path Traversal in SOPlanning
- SOPlanning
- Path traversal
Not analysed yet 1 Jun 2026
CVE-2026-40546 CVE record

CVSS 8.7 High

Multiple SQL Injections in SOPlanning
- SOPlanning
- SQL injection
Not analysed yet 1 Jun 2026
CVE-2026-40545 CVE record

CVSS 5.1 Medium

Reflected XSS in SOPlanning
- SOPlanning
- Cross-site scripting (XSS)
Not analysed yet 1 Jun 2026
CVE-2026-40544 CVE record

CVSS 5.1 Medium

Stored XSS in SOPlanning
- SOPlanning
- Cross-site scripting (XSS)
Not analysed yet 1 Jun 2026
CVE-2026-40543 CVE record

CVSS 8.8 High

Missing Authorization in SOPlanning
- SOPlanning
- Broken access control
Not analysed yet 1 Jun 2026
CVE-2025-62731 CVE record

CVSS 5.1 Medium

Stored XSS in SOPlanning
- SOPlanning
- Cross-site scripting (XSS)
Not analysed yet 20 Nov 2025
CVE-2025-62730 CVE record

CVSS 8.7 High

Privilege Escalation via Incorrect Authorization in SOPlanning
- SOPlanning
- Broken access control
Not analysed yet 20 Nov 2025
CVE-2025-62729 CVE record

CVSS 5.1 Medium

Stored XSS in SOPlanning
- SOPlanning
- Cross-site scripting (XSS)
Not analysed yet 20 Nov 2025
CVE-2025-62297 CVE record

CVSS 5.1 Medium

Stored XSS in SOPlanning
- SOPlanning
- Cross-site scripting (XSS)
Not analysed yet 20 Nov 2025
CVE-2025-62296 CVE record

CVSS 5.1 Medium

Stored XSS in SOPlanning
- SOPlanning
- Cross-site scripting (XSS)
Not analysed yet 20 Nov 2025
CVE-2025-62295 CVE record

CVSS 5.1 Medium

Stored XSS in SOPlanning
- SOPlanning
- Cross-site scripting (XSS)
Not analysed yet 20 Nov 2025
CVE-2025-62294 CVE record

CVSS 8.7 High

Predictable Generation of Password Recovery Token
- SOPlanning
- CWE-340
Not analysed yet 20 Nov 2025
CVE-2025-62293 CVE record

CVSS 5.3 Medium

Broken Access Control in SOPlanning
- SOPlanning
- Broken access control
Not analysed yet 20 Nov 2025
CVE-2025-41001 CVE record

CVSS 5.1 Medium

Cross-Site Scripting (XSS) in SOPlanning
- SOPlanning
- Cross-site scripting (XSS)
Not analysed yet 10 Nov 2025
CVE-2024-9574 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

SQL Injection vulnerability in SOPlanning
- SOPlanning
- SQL injection
Not analysed yet 7 Oct 2024
CVE-2024-9573 CVE record

CVSS 6.3 Medium

SQL Injection vulnerability in SOPlanning
- SOPlanning
- SQL injection
Not analysed yet 7 Oct 2024
CVE-2024-9572 CVE record

CVSS 6.3 Medium

Cross-Site Scripting vulnerability in SOPlanning
- SOPlanning
- Cross-site scripting (XSS)
Not analysed yet 7 Oct 2024
CVE-2024-9571 CVE record

CVSS 6.3 Medium

Cross-Site Scripting vulnerability in SOPlanning
- SOPlanning
- Cross-site scripting (XSS)
Not analysed yet 7 Oct 2024