PatchTheCVEprojectsend vulnerabilities
Recent CVEs affecting projectsend products. 5 tracked.
projectsend has 5 tracked vulnerabilities, 2 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 2. Most recent: 2025-12-22. Highest priority: CVE-2024-11680 (score 97/100).
- CVE-2024-11680 CRITICAL 9.8 EXPLOITED UPGRADE ProjectSend Improper Authentication Vulnerability
- CVE-2023-53980 CRITICAL 9.8 DOWNGRADE ProjectSend r1605 contains a remote code execution vulnerability that allows attackers to upload malicious fil
- CVE-2023-53930 HIGH 7.5 DOWNGRADE ProjectSend r1605 contains an insecure direct object reference vulnerability that allows unauthenticated attac
- CVE-2023-53906 MEDIUM 4.8 DOWNGRADE projectSend r1605 contains a stored cross-site scripting vulnerability that allows authenticated administrator
- CVE-2023-53905 HIGH 8.0 DOWNGRADE ProjectSend r1605 contains a CSV injection vulnerability that allows authenticated users to inject malicious f
FAQ
How do I fix projectsend vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is projectsend being exploited right now?
Yes: 1 projectsend CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which projectsend CVE should I patch first?
CVE-2024-11680 currently ranks highest (97/100): ProjectSend Improper Authentication Vulnerability.