VYPR

Planmanager

by Rle Nova

CVEs (1)

  • CVE-2026-1469Jan 29, 2026
    risk 0.00cvss epss 0.00

    Stored Cross-Site Scripting (XSS) in RLE NOVA's PlanManager. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting malicious payload through the ‘comment’ and ‘brand’ parameters in ‘/index.php’. The payload is stored by…