CVE-2026-40545EPSS p33.2%
CVE-2026-40545CVE-2026-40545
Description
SOPlanning is vulnerable to Reflected XSS via the taches parameter. An attacker can craft a malicious URL which, when opened by authenticated victim, results in arbitrary JavaScript execution in the victim’s browser.
This issue affects SOPlanning version 1.55 and below.
Scoring
| EPSS | 0.40% probability of exploitation · percentile 33.2% · 2026-08-03T12:00:16Z |
| Last modified | 2026-07-22 |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.