SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php with statut[].