Vulnerabilities (CVE)

Filtered by vendor Plane Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-30791 1 Plane 1 Plane 2023-07-28 N/A 4.6 MEDIUM
Plane version 0.7.1-dev allows an attacker to change the avatar of his profile, which allows uploading files with HTML extension that interprets both HTML and JavaScript.