CVE-2026-40549

Vulnerability Description

SOPlanning is vulnerable to Cross‑Site Request Forgery (CSRF) in groupe_save create, modify and delete endpoints. An attacker can craft a malicious website that, when visited by an authenticated user, automatically sends a forged GET or POST request to the application.

This issue affects SOPlanning version 1.55 and below.

Vulnerability Details

Published Date

June 01, 2026

Last Modified

June 01, 2026

CWE ID

CWE-352

Source

NVD

Vendor

SOPlanning

Product

SOPlanning

External References

https://cert.pl/en/posts/2026/06/CVE-2026-40543
https://www.soplanning.org/en/

CVE-2026-40549

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment