CVE-2023-0607: ProjectSend

Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Cross-site Scripting (XSS) - Stored in GitHub repository projectsend/projectsend prior to r1606.

Affected products

• ProjectSend ProjectSend: before r1606 (fixed in r1606)

Published 2023-02-01. Last modified 2026-06-17.