Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

ProjectSend — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in ProjectSend, with AI-generated Chinese analysis, references, and POCs.

Vendor: unspecified

CVE IDTitleCVSSSeverityPaused
CVE-2026-5624 ProjectSend upload.php cross-site request forgery CWE-352 4.3 Medium2026-04-06
CVE-2026-4045 projectsend Auth.php response discrepancy CWE-204 3.7 Low2026-03-12
CVE-2026-4044 projectsend Delete import-orphans.php realpath path traversal CWE-22 3.8 Low2026-03-12
CVE-2026-3977 projectsend AJAX Endpoints authorization CWE-862 6.3 Medium2026-03-12
CVE-2023-53980 ProjectSend r1605 Remote Code Execution via File Extension Manipulation CWE-434 9.8 Critical2025-12-22
CVE-2023-53930 ProjectSend r1605 Insecure Direct Object Reference File Download Vulnerability CWE-639 7.5 High2025-12-17
CVE-2023-53905 ProjectSend r1605 CSV Injection via User Account Export Functionality CWE-1236 8.0 High2025-12-17
CVE-2023-53906 ProjectSend r1605 Stored Cross-Site Scripting via Custom Assets Page CWE-79 4.8 Medium2025-12-17
CVE-2025-13232 projectsend File Editor/Custom Download Aliases cross site scripting CWE-79 3.5 Low2025-11-16
CVE-2024-11680 ProjectSend Unauthenticated Configuration Modification CWE-306 9.8 Critical2024-11-26
CVE-2024-7659 projectsend Password Reset Token functions.php generate_random_string random values CWE-330 3.7 Low2024-08-11
CVE-2024-7658 projectsend process.php get_preview resource injection CWE-99 5.3 Medium2024-08-11
CVE-2017-20101 ProjectSend information disclosure CWE-200 3.5 Low2022-06-27

All 13 known CVE vulnerabilities affecting ProjectSend with full Chinese analysis, references, and POCs where available.