Lucene search
HistoryFeb 14, 2024 - 3:15 p.m.
CVE-2024-25218
cross-site scripting
task manager app
arbitrary web scripts
html
crafted payload
project name parameter
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.0%
A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Project Name parameter /TaskManager/Projects.php.
Affected configurations
Node
task_manager_in_php_with_source_code_projecttask_manager_in_php_with_source_codeMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| task_manager_in_php_with_source_code_project | task_manager_in_php_with_source_code | 1.0 | cpe:2.3:a:task_manager_in_php_with_source_code_project:task_manager_in_php_with_source_code:1.0:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2024-25218
2024-02-14 15:15:09
prion
prion
Cross site scripting
2024-02-14 15:15:00
cvelist
cvelist
CVE-2024-25218
2024-02-14 00:00:00
vulnrichment
vulnrichment
CVE-2024-25218
2024-02-14 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.0%
Related for NVD:CVE-2024-25218