CVE-2020-9268: Soplanning

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nom_createur&by= substring.

Affected products

• Soplanning Soplanning: version 1.45 only

Published 2020-02-18. Last modified 2026-06-17.