Vulnerabilidades em ProjectWorlds
113 resultadosAnálise Vexday
A base do Vexday registra 4 CVEs associadas ao fornecedor ProjectWorlds, nenhuma delas incluída no catálogo KEV (sem indicação de exploração ativa) e nenhuma classificada como crítica por CVSS. A fraqueza dominante é a CWE-74 (injeção), e todas as 4 vulnerabilidades foram publicadas nos últimos 90 dias, o que indica risco recente que merece acompanhamento, ainda que sem sinal de ataque em curso.
CVE-2026-114263MEDIUMProjectWorlds Advanced Library Management System individual_report_search.php mysqli_query sql injectionEPSS 0.3%CVE-2026-1700MEDIUMprojectworlds House Rental and Property Listing sms.php cross site scriptingEPSS 0.3%CVE-2025-11425MEDIUMprojectworlds Advanced Library Management System edit_admin.php cross site scriptingEPSS 0.3%CVE-2025-12230MEDIUMprojectworlds Expense Management System Currency create cross site scriptingEPSS 0.3%CVE-2025-12231MEDIUMprojectworlds Expense Management System Expense Categories create cross site scriptingEPSS 0.3%CVE-2025-12228MEDIUMprojectworlds Expense Management System Users Page create cross site scriptingEPSS 0.3%CVE-2025-12229MEDIUMprojectworlds Expense Management System Roles Page create cross site scriptingEPSS 0.3%CVE-2026-114265MEDIUMProjectWorlds Advanced Library Management System Search Form returned_book_search.php mysqli_query sql injectionEPSS 0.2%CVE-2026-0642MEDIUMprojectworlds House Rental and Property Listing complaint.php cross site scriptingEPSS 0.2%CVE-2025-12227MEDIUMprojectworlds Gate Pass Management System add-pass.php cross site scriptingEPSS 0.2%CVE-2026-114264MEDIUMProjectWorlds Advanced Library Management System edit_member.php sql injectionEPSS 0.2%CVE-2026-114266MEDIUMProjectWorlds Advanced Library Management System profile.php mysqli_query sql injectionEPSS 0.2%CVE-2026-114039MEDIUMprojectworlds Advanced Library Management System report_search.php mysqli_query sql injectionEPSS 0.2%