Alanaktion Phproject

• CVE-2026-104991 High 7.1 Phproject < 1.8.7 Missing Authorization via Issues REST API 0.3%
• CVE-2025-57768 Medium 6.9 Stored XSS in “hours” fields when creating or editing an issue, using SQLite database 0.4%
• CVE-2020-11011 Critical 9.9 RCE via file upload in Phproject 1.9%