CVE-2020-9266: Soplanning

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary changing of the admin password via process/xajax_server.php.

Affected products

• Soplanning Soplanning: version 1.45 only

Published 2020-02-18. Last modified 2026-06-17.