Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
DevaslanPHP records in CISA KEVNo DevaslanPHP vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 66
A stored cross-site scripting (XSS) vulnerability exists in DevaslanPHP project-management v1.2.4.
CVSS 3.1HIGH 7.6· Network · No auth · User interaction · EPSS 0.00347 · Published 2025-07-31 · No fix listed CWE-79
Priority MEDIUM 57
A flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00192 · Published 2026-09-28 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00192 · Published 2026-09-28 · No fix listed CWE-74
Priority MEDIUM 56
A vulnerability has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00155 · Published 2026-09-28 · No fix listed CWE-918
Priority LOW 24
A vulnerability has been found in DevaslanPHP project-management up to 2.0.0-beta1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0023 · Published 2026-06-01 · No fix listed CWE-266
Priority LOW 24
A flaw has been found in DevaslanPHP project-management up to 2.0.0-beta1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0023 · Published 2026-06-01 · No fix listed CWE-266
Open these records in search →