Projectsend

Projectsend is a self-hosted file-sharing and project-collaboration application whose modest product scope belies its concentration in a more prominent segment of the vulnerability landscape. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes and frequently acquire public exploit code, reflecting the application's exposure to unauthenticated and authenticated attackers across its web interface. The recurring weakness classes—including cross-site scripting, path traversal, authorization bypass, and improper authentication—are characteristic of web application input handling and access-control implementation, and the presence of CSV formula injection points to a common overlooked surface in data-export features. These vulnerabilities typically affect deployments that store and manage sensitive project files and team credentials, making patching cycles operationally important for organizations using the platform. Current severity, exploitation activity, and exposure counts are shown alongside this summary.