Vulnerabilities

TI-2026-65038 CVE-2026-100900 · GHSA-mmh4-p5pc-rm2c

DevaslanPHP project-management Jira Import jira-import updateJiraProjects server-side request forgery

MEDIUM 56

A vulnerability has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00155 Published 2026-09-28 No fix listed CWE-918

TI-2026-65037 CVE-2026-100899 · GHSA-8gh5-g75w-3wfh

MEDIUM 57

A flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00192 Published 2026-09-28 No fix listed CWE-74

TI-2026-65036 CVE-2026-100898 · GHSA-5cqw-vrg5-p24q

MEDIUM 57

A vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00192 Published 2026-09-28 No fix listed CWE-74

TI-2026-09021 CVE-2026-10285 · GHSA-9xj7-hrc2-w62q

LOW 24

A vulnerability has been found in DevaslanPHP project-management up to 2.0.0-beta1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0023 Published 2026-06-01 No fix listed CWE-266

TI-2026-09020 CVE-2026-10284 · GHSA-2q6w-qc38-vc8q

LOW 24

A flaw has been found in DevaslanPHP project-management up to 2.0.0-beta1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0023 Published 2026-06-01 No fix listed CWE-266

TI-2025-32505 CVE-2025-52203 · GHSA-6c8f-35g7-q3cm

HIGH 66

A stored cross-site scripting (XSS) vulnerability exists in DevaslanPHP project-management v1.2.4.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.00347 Published 2025-07-31 No fix listed CWE-79