Devaslanphp - vulnerabilities (CVEs)

6 CVEs in 2 products, 0 in the last 30 days, newest from 2026-09-28.

Products

CVE-2026-100900 - CVSS 5.5 (medium), 2026-09-28: A vulnerability has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. Affected is the function updateJiraProjects of the file…
CVE-2026-100899 - CVSS 6.3 (medium), 2026-09-28: A flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. This impacts the function whereRaw of the file…
CVE-2026-100898 - CVSS 6.3 (medium), 2026-09-28: A vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1. This affects the function whereRaw of the file…
CVE-2026-10285 - CVSS 5.4 (medium), 2026-06-01: A vulnerability has been found in DevaslanPHP project-management up to 2.0.0-beta1. Affected by this issue is the function KanbanScrumHelper::recordUpdated of…
CVE-2026-10284 - CVSS 5.4 (medium), 2026-06-01: A flaw has been found in DevaslanPHP project-management up to 2.0.0-beta1. Affected by this vulnerability is the function editComment/doDeleteComment of the…
CVE-2025-52203 - CVSS 7.6 (high), 2025-07-31: A stored cross-site scripting (XSS) vulnerability exists in DevaslanPHP project-management v1.2.4. The vulnerability resides in the Ticket Name field, which…