CVE-2026-32703 | opf openproject up to 16.6.8/17.0.5/17.1.2/17.2.0 Repositories cross site scripting (GHSA-p423-72h4-fjvp)

March 19, 2026 Yanac

A vulnerability labeled as problematic has been found in opf openproject up to 16.6.8/17.0.5/17.1.2/17.2.0. This affects an unknown function of the component Repositories Module. Executing a manipulation can lead to cross site scripting.

The identification of this vulnerability is CVE-2026-32703. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More