CVE-2014-8674: Soplanning

Medium severity, CVSS 5.4. EPSS: 2.6% chance of exploitation in the next 30 days.

Multiple Cross-Site Scripting (XSS) vulnerabilities exist in Simple Online Planning (SOPlanning) before 1.33 via the document.cookie in nb_mois and mb_ligness and the debug GET parameter to export.php, which allows malicious users to execute arbitrary code.

Affected products

• Soplanning Soplanning: before 1.33 (fixed in 1.33)

Published 2020-01-06. Last modified 2026-06-17.