Skip to content
OpenAdvisories

Product · Alanaktion

phproject

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-57768

    Stored XSS in “hours” fields when creating or editing an issue, using SQLite database

    Phproject is a high performance full-featured project management system. From 1.8.0 to before 1.8.3, a Stored Cross-Site Scripting (XSS) vulnerability exists in the Planned Hours field when creating a new project. When sending a POST request to /issues/new/, …

    Alanaktion phproject