Priority MEDIUM 64
Plane CE 1.3.1 allows a low-privileged project member to submit arbitrary HTML/JS in the description_html field when creating an intake work item through the API v1 intake endpoint.
CVSS 4.0MEDIUM 6.9· Network · Low privileges · User interaction · EPSS 0.00165 · Published 2026-06-17 · No fix listed CWE-79
Priority HIGH 71
Plane is an open-source project management tool.
CVSS 3.1HIGH 8.3· Network · Low privileges · No interaction · EPSS 0.00286 · Published 2026-06-10 · Fixed in 1.3.1 CWE-639
Priority MEDIUM 62
Plane is an open-source project management tool.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00295 · Published 2026-05-20 · Fixed in 1.3.1 CWE-943
Priority HIGH 67
Plane is an an open-source project management tool.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00255 · Published 2026-04-09 · Fixed in 1.3.0 CWE-918
Priority LOW 19
Plane is an an open-source project management tool.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00174 · Published 2026-04-07 · Fixed in 1.3.0 CWE-200
Priority HIGH 67
Plane is an an open-source project management tool.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00216 · Published 2026-04-07 · Fixed in 1.3.0 CWE-639
Priority LOW 37
Plane is an an open-source project management tool.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00375 · Published 2026-03-06 · Fixed in 1.2.3 CWE-918
Priority LOW 39
Plane is an an open-source project management tool.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00416 · Published 2026-03-06 · Fixed in 1.2.2 CWE-200
Priority LOW 33
Plane is an an open-source project management tool.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00242 · Published 2026-02-25 · Fixed in 1.2.2 CWE-918
Priority LOW 30
Plane is an an open-source project management tool.
CVSS 4.0MEDIUM 4.9· Network · Low privileges · No interaction · EPSS 0.00248 · Published 2026-02-25 · Fixed in 1.2.2 CWE-639
Priority LOW 19
Plane is an an open-source project management tool.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00192 · Published 2026-01-02 · Fixed in 1.2.0 CWE-284
Priority MEDIUM 53
Plane is open-source project management software.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0027 · Published 2025-05-21 · Fixed in 0.23 CWE-276
Priority MEDIUM 58
Plane is an open-source project management tool.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00276 · Published 2025-01-06 · Fixed in 0.23 CWE-79
Priority HIGH 79
Plane is an open-source project management tool.
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00573 · Published 2024-10-11 · Fixed in 0.23.0 CWE-918
Priority HIGH 66
Plane version 0.7.1-dev allows an attacker to change the avatar of his profile, which allows uploading files with HTML extension that interprets both HTML and JavaScript.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0053 · Published 2023-07-15 · No fix listed CWE-434
Priority HIGH 68
Plane version 0.7.1 allows an unauthenticated attacker to view all stored server files of all users.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00662 · Published 2023-07-15 · No fix listed CWE-862
THREATIST.IORead the docs