ProcessMaker ProcessMaker

• CVE-2026-107803 Medium 6.5 ProcessMaker has SQL injection in the tasks endpoint through the order_by parameter 0.2%
• CVE-2021-47978 Medium 6.2 ProcessMaker 3.5.4 Local File Inclusion via Path Traversal 0.8%