High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-04-20	CVE-2021-43481	SQL Injection vulnerability in Webtareas Project Webtareas 2.0/2.1/2.4 An SQL Injection vulnerability exists in Webtareas 2.4p3 and earlier via the $uq HTTP POST parameter in editapprovalstage.php. network low complexity webtareas-project CWE-89	7.5
2020-09-18	CVE-2020-25733	Unrestricted Upload of File with Dangerous Type vulnerability in Webtareas Project Webtareas 2.0/2.1 webTareas through 2.1 allows upload of the dangerous .exe and .shtml file types. network low complexity webtareas-project CWE-434	7.5