CVE-2025-63638

Sourcecodester AI-Powered To-Do List App v1.0 is vulnerable to Cross-Site Scripting XSS in the "Task Title" and "Description Optional" fields when creating a Task, allowing an attacker to inject arbitrary potentially malicious HTML/JavaScript code that executes in the victim's browser upon clicki...

CVE-2025-63638

creationtimestamp| type| source ---|---|--- 2025-11-07 21:45:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m532gropri2q...