A vulnerability, which was classified as critical , has been found in SOPlanning up to 1.55 . The impacted element is an unknown function. This manipulation causes sql injection. This vulnerability is tracked as CVE-2026-40546 . The attack is possible to be carried out remotely. No exploit exists.