Alanaktion Phproject
3 CVEs affecting Alanaktion Phproject. Latest disclosed: 2026-10-02. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-11011 | Critical | 9.9 | 2020-04-22 | In Phproject before version 1.7.8, there's a vulnerability which allows users with access to file uploads to execute arbitrary code. This is patched in version… |
CVE-2026-104991 | High | 7.1 | 2026-10-02 | Phproject before 1.8.7 contains a missing object-level authorization vulnerability in the REST API issue endpoints (single_get, single_comments, single_comment… |
CVE-2025-57768 | | 2025-08-21 | Phproject is a high performance full-featured project management system. From 1.8.0 to before 1.8.3, a Stored Cross-Site Scripting (XSS) vulnerability exists i… |