Technology · SOPlanning
SOPlanning vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 17 vulnerabilities in SOPlanning: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-50644, was published on 9 July 2026.
- Last 7 days
- 0
- Last 90 days
- 0
- Critical, all time
- 0
- Exploited in the wild
- 0
About SOPlanning
SOPlanning is an open-source online planning tool designed for simple and visual resource management.
Latest SOPlanning vulnerabilities
- CVE-2026-50644: SOPlanning SQL injection in audit retention configurationinfoCVSS 8.6
- CVE-2026-40549: SOPlanning CSRF in groupe_save endpointsinfoCVSS 5.1
- CVE-2026-40548: SOPlanning unrestricted file upload in backup functionalityinfoCVSS 6.4
- CVE-2026-40547: SOPlanning Path Traversal in backup endpointsinfoCVSS 6.4
- CVE-2026-40546: SOPlanning SQL injection in multiple endpointsinfoCVSS 8.7
- CVE-2026-40545: SOPlanning Reflected XSS in taches parameterinfoCVSS 5.1
- CVE-2026-40544: SOPlanning Stored XSS in backup upload functionalityinfoCVSS 5.1
- CVE-2026-40543: SOPlanning missing authorization in backup functionalitiesinfoCVSS 8.8
- CVE-2025-62731: SOPlanning is vulnerable to Stored XSS in /feries endpoint. Malicious attacker with access to public holidays feature…mediumCVSS 4.8EPSS 0.2%
- CVE-2025-62730: SOPlanning is vulnerable to Privilege Escalation in user management tab. Users with user_manage_team role are allowed…highCVSS 8.8EPSS 0.3%
- CVE-2025-62729: SOPlanning is vulnerable to Stored XSS in /status endpoint. Malicious attacker with an account can inject arbitrary…mediumCVSS 5.4EPSS 0.2%
- CVE-2025-62297: SOPlanning is vulnerable to Stored XSS in /projets endpoint. Malicious attacker with medium privileges can inject…mediumCVSS 5.4EPSS 0.2%
- CVE-2025-62296: SOPlanning is vulnerable to Stored XSS in /taches endpoint. Malicious attacker with medium privileges can inject…mediumCVSS 5.4EPSS 0.2%
- CVE-2025-62295: SOPlanning is vulnerable to Stored XSS in /groupe_form endpoint. Malicious attacker with medium privileges can inject…mediumCVSS 5.4EPSS 0.2%
- CVE-2025-62294: SOPlanning is vulnerable to Predictable Generation of Password Recovery Token. Due to weak mechanism of generating…highCVSS 7.5EPSS 0.3%
- CVE-2025-62293: SOPlanning is vulnerable to Broken Access Control in /status endpoint. Due to lack of permission checks in Project…mediumCVSS 5.4EPSS 0.2%
- CVE-2025-41001: Cross Site Scripting (XSS) vulnerability stored in SOPlanning v1.53.02, which consist of a stored XSS due to a lack of…mediumCVSS 5.4EPSS 0.2%
Most severe SOPlanning vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2025-62730: SOPlanning is vulnerable to Privilege Escalation in user management tab. Users with user_manage_team role are allowed…highCVSS 8.8EPSS 0.3%
- CVE-2025-62294: SOPlanning is vulnerable to Predictable Generation of Password Recovery Token. Due to weak mechanism of generating…highCVSS 7.5EPSS 0.3%
- CVE-2025-41001: Cross Site Scripting (XSS) vulnerability stored in SOPlanning v1.53.02, which consist of a stored XSS due to a lack of…mediumCVSS 5.4EPSS 0.2%
- CVE-2025-62729: SOPlanning is vulnerable to Stored XSS in /status endpoint. Malicious attacker with an account can inject arbitrary…mediumCVSS 5.4EPSS 0.2%
- CVE-2025-62297: SOPlanning is vulnerable to Stored XSS in /projets endpoint. Malicious attacker with medium privileges can inject…mediumCVSS 5.4EPSS 0.2%
- CVE-2025-62296: SOPlanning is vulnerable to Stored XSS in /taches endpoint. Malicious attacker with medium privileges can inject…mediumCVSS 5.4EPSS 0.2%
- CVE-2025-62295: SOPlanning is vulnerable to Stored XSS in /groupe_form endpoint. Malicious attacker with medium privileges can inject…mediumCVSS 5.4EPSS 0.2%
- CVE-2025-62293: SOPlanning is vulnerable to Broken Access Control in /status endpoint. Due to lack of permission checks in Project…mediumCVSS 5.4EPSS 0.2%
- CVE-2025-62731: SOPlanning is vulnerable to Stored XSS in /feries endpoint. Malicious attacker with access to public holidays feature…mediumCVSS 4.8EPSS 0.2%
- CVE-2026-40543: SOPlanning missing authorization in backup functionalitiesinfoCVSS 8.8
Vulnerabilities per week
Nothing was published in the last eight weeks. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many SOPlanning vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/soplanning)<a href="https://junglewise.ai/threats/technologies/soplanning"><img src="https://junglewise.ai/threats/technologies/soplanning/badge.svg" alt="SOPlanning vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/soplanning.json, and this page as text at https://junglewise.ai/threats/technologies/soplanning.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "SOPlanning vulnerabilities", https://junglewise.ai/threats/technologies/soplanning, 11 November 2026.