Phproject
Alanaktion · 2 CVEs
CVE-2026-104991
HIGH
Phproject < 1.8.7 Missing Authorization via Issues REST API
Oct 2, 2026
CVE-2025-57768
MEDIUM
Stored XSS in “hours” fields when creating or editing an issue, using SQLite database
Aug 21, 2025
CVE-2020-11011
CRITICAL
RCE via file upload in Phproject
Apr 22, 2020
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-104991 | Phproject < 1.8.7 Missing Authorization via Issues REST API | HIGH | 0.22% | Oct 2, 2026 |
| CVE-2025-57768 | Stored XSS in “hours” fields when creating or editing an issue, using SQLite database | MEDIUM | 0.40% | Aug 21, 2025 |
| CVE-2020-11011 | RCE via file upload in Phproject | CRITICAL | 1.87% | Apr 22, 2020 |
Showing 1 to 2 of 2 CVEs