CVE-2026-40546 — Multiple SQL Injections in SOPlanning
SOPlanning is vulnerable to SQL Injection across multiple endpoints and parameters. Attacker with low privileges can inject arbitrary SQL commands, potentially gaining full cont…
Published: 2026-06-01 · CVSS: 8.7 · CVSS 4.0
SOPlanning is vulnerable to SQL Injection across multiple endpoints and parameters. Attacker with low privileges can inject arbitrary SQL commands, potentially gaining full control over the database. This issue affects SOPlanning version 1.55 and below.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7