CVE-2020-9269: Soplanning

High severity, CVSS 7.2. EPSS: 2.4% chance of exploitation in the next 30 days.

SOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via the users parameter, as demonstrated by export_ical.php.

Affected products

• Soplanning Soplanning: version 1.45 only

Published 2020-02-18. Last modified 2026-06-17.