Project Management

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. A stored cross-site scripting (XSS) vulnerability exists in DevaslanPHP project-management v1.2.4. The vulnerability resides in the Ticket Name field, which fails to properly sani…CVE-2025-52203Devaslanphp · CVSS 7.6 · 0.3% likely

   CWE-79

2. DevaslanPHP project-management Ticket KanbanScrumHelper.php recordUpdated improper authorizationCVE-2026-10285DevaslanPHP · CVSS 5.4 · 0.2% likely

   CWE-266

3. DevaslanPHP project-management Livewire ViewTicket.php doDeleteComment improper authorizationCVE-2026-10284DevaslanPHP · CVSS 5.4 · 0.2% likely

   CWE-266

4. DevaslanPHP project-management Timesheet Dashboard MonthlyReport.php whereRaw sql injectionCVE-2026-100899DevaslanPHP · CVSS 6.3 · 0.2% likely

   CWE-89

5. DevaslanPHP project-management Timesheet Dashboard ActivitiesReport.php whereRaw sql injectionCVE-2026-100898DevaslanPHP · CVSS 6.3 · 0.2% likely

   CWE-89

6. DevaslanPHP project-management Jira Import jira-import updateJiraProjects server-side request forgeryCVE-2026-100900DevaslanPHP · CVSS 5.5 · 0.2% likely

   CWE-918

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.