PaperWork vulnerabilities

3 known vulnerabilities in PaperWork from GG Soft Software Services. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Paperwork: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-85215Oct 2, 2026GG Soft Software Services

  Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GG Soft Software Services Inc. Paperwork allows SQL Injection. This issue affects Paperwork: through 2026-09-09.

• 7.1 High severity

  PaperWork: Authorization Bypass Through User-Controlled Key

  CVE-2025-14101Dec 17, 2025GG Soft Software Services

  Authorization Bypass Through User-Controlled Key vulnerability in GG Soft Software Services Inc. PaperWork allows Exploitation of Trusted Identifiers. This issue affects PaperWork: from 5.2.0.9427 before 6.0.

• 8.8 High severity

  PaperWork: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-10968Nov 7, 2025GG Soft Software Services

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hibernate vulnerability in GG Soft Software Services Inc. PaperWork allows Blind SQL Injection, SQL Injection. This issue affects PaperWork: from 6