A vulnerability was found in projectsend up to r1945. It has been classified as critical. The affected element is an unknown function of the component AJAX Endpoints. The manipulation leads to missing authorization.
This vulnerability is documented as CVE-2026-3977. The attack can be initiated remotely. There is not any exploit available.
To fix this issue, it is recommended to deploy a patch.
