Reflected XSS Vulnerability in SOPlanning Affects User Security
CVE-2026-40545

5.1MEDIUM

Key Information:

Vendor

Soplanning

Status
Soplanning
Vendor
CVE Published:
1 June 2026

What is CVE-2026-40545?

SOPlanning has a vulnerability allowing attackers to exploit the reflected XSS issue via the taches parameter. When a crafted malicious URL is accessed by an authenticated user, it triggers arbitrary JavaScript execution in their browser, potentially compromising sensitive data or leading to further exploitation.

Affected Version(s)

SOPlanning 0 <= 1.55

References

https://cert.pl/en/posts/2026/06/CVE-2026-40543
third-party-advisory
https://www.soplanning.org/en/
product

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Łukasz Jaworski
.