CVE-2021-42943: Ipplan Project Ipplan

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

Stored cross-site scripting (XSS) in admin/usermanager.php over IPPlan v4.92b allows remote attackers to inject arbitrary web script or HTML via the userid parameter.

Affected products

• Ipplan Project Ipplan: version 4.92b only

Published 2022-05-17. Last modified 2026-06-17.