CVE-2025-39365

Name of the Vulnerable Software and Affected Versions: wProject versions prior to 5.8.0

Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS), which allows Reflected XSS. This type of issue can occur when user input is not properly sanitized, allowing an attacker to inject malicious scripts into a website.

Recommendations: For versions prior to 5.8.0, update to version 5.8.0 or later to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation.