Vulnerabilities > Projectsend > Low

DATE CVE VULNERABILITY TITLE RISK
2022-06-27 CVE-2017-20101 Authorization Bypass Through User-Controlled Key vulnerability in Projectsend R754
A vulnerability, which was classified as problematic, was found in ProjectSend r754.
3.5
2021-10-11 CVE-2021-40888 Cross-site Scripting vulnerability in Projectsend R1295
Projectsend version r1295 is affected by Cross Site Scripting (XSS) due to lack of sanitization when echo output data in returnFilesIds() function.
3.5