PT-2022-10523

Name of the Vulnerable Software and Affected Versions webTareas version 2.2p1 Description A Cross Site Scripting XSS issue exists in webTareas, allowing attackers to inject malicious scripts via the Name field in the /projects/editproject.php API endpoint. Recommendations For webTareas version...

CVE-2021-36608: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /projects/editproject.php...

CVE-2020-25735: Improper Neutralization of Input During Web Page Generation

webTareas through 2.1 allows XSS in clients/editclient.php, extensions/addextension.php, administration/addannouncement.php, administration/departments.php, administration/locations.php, expenses/claimtype.php, projects/editproject.php, and general/newnotifications.php...