CVE-2021-47819: Projeqtor Project Management

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

ProjeQtOr Project Management 9.1.4 contains a file upload vulnerability that allows guest users to upload malicious PHP files with arbitrary code execution capabilities. Attackers can upload a PHP script through the profile attachment section and execute system commands by accessing the uploaded file with a specially crafted request parameter.

Affected products

• Projeqtor Projeqtor Project Management: version 9.1.4 only

Published 2026-01-15. Last modified 2026-06-17.