VYPR

Planmanager

by Rle Nova

CVEs (1)

  • CVE-2026-1469MedJan 29, 2026
    risk 0.35cvss 5.4epss 0.00

    Stored Cross-Site Scripting (XSS) in RLE NOVA's PlanManager. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting malicious payload through the ‘comment’ and ‘brand’ parameters in ‘/index.php’. The payload is stored by…