projectsend
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 35 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 7, 2015 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →ProjectSend 2.0.0 before 2.7.0 Path Validation Bypass via Orphan File Import/Delete
ProjectSend 2.5.0 before 2.7.0 Unverified Password Change via /settings/password
ProjectSend 2.0.0 before 2.7.0 Incorrect Authorization via Users API Token Abilities
Projectsend r1295 Stored Cross-Site Scripting via files-edit.php
ProjectSend upload.php cross-site request forgery
ProjectSend r1605 Remote Code Execution via File Extension Manipulation
ProjectSend r1605 Insecure Direct Object Reference File Download Vulnerability
ProjectSend r1605 Stored Cross-Site Scripting via Custom Assets Page
ProjectSend r1605 CSV Injection via User Account Export Functionality
projectsend File Editor/Custom Download Aliases cross site scripting
Monitor projectsend in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.