Cross-Site Scripting Flaw in Task Manager App from Burak Sevben
CVE-2024-25221

6.1MEDIUM

Key Information:

Vendor

Task Manager In PHP With Source Code Project

Status
Task Manager In PHP With Source Code
Vendor
CVE Published:
14 February 2024

What is CVE-2024-25221?

The Task Manager App version 1.0 is susceptible to a cross-site scripting vulnerability due to improper handling of user input, allowing attackers to inject malicious scripts into the Note Section parameter. This security flaw permits the execution of arbitrary web scripts or HTML, potentially compromising user data and leading to unauthorized actions against users interacting with the compromised application.

References

https://github.com/BurakSevben/CVEs/blob/main/Task%20Mana...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.