AndonDesign — Vulnerabilities & Security Advisories 7

AndonDesign develops web-based project management and collaboration tools used by small to medium businesses. Historically, their products have been vulnerable to multiple remote code execution (RCE) and cross-site scripting (XSS) flaws, often stemming from insufficient input validation and improper access controls. Privilege escalation vulnerabilities have also been recurrent, allowing unauthorized users to access sensitive project data. While no major public security incidents have been documented, their seven CVEs indicate consistent security weaknesses in authentication mechanisms and data handling. The company's products remain attractive targets due to their widespread use in managing business-critical information.