DevaslanPHP vulnerabilities
We track 1 vulnerability in DevaslanPHP products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 31, 2025.
1vulnerabilities
0critical
1high
0exploited
7.6average CVSS score
Latest DevaslanPHP vulnerabilities
- 7.6 High severity
Project Management: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting (XSS) vulnerability exists in DevaslanPHP project-management v1.2.4. The vulnerability resides in the Ticket Name field, which fails to properly sanitize user-supplied input. An authenticated attacker can inject malicious JavaScri