CVE-2024-27703

The open-source project management system Leantime version 3.0.6 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. A remote attacker can exploit the to-do title parameter to execute arbitrary code, potentially performing unauthorized actions on the affected system. As a temporary workaro...