CherryHQ — Vulnerabilities & Security Advisories 4

CherryHQ develops collaboration and project management software used by teams for workflow organization and document sharing. Historically, vulnerabilities have included stored cross-site scripting (XSS) in user-generated content, remote code execution (RCE) in file upload functionality, and privilege escalation flaws in access control mechanisms. The product has demonstrated inconsistent input validation and insufficient access controls in past versions. While no major public security incidents have been documented, the presence of four CVEs indicates recurring issues in secure coding practices, particularly around sanitization and permission management.