Lucene search
+L

3 matches found

EUVD
EUVD
•added 2025/11/07 9:31 p.m.•21 views

EUVD-2025-38293

Sourcecodester AI-Powered To-Do List App v1.0 is vulnerable to Cross-Site Scripting XSS in the "Task Title" and "Description Optional" fields when creating a Task, allowing an attacker to inject arbitrary potentially malicious HTML/JavaScript code that executes in the victim's browser upon clicki...

5.8AI score0.00241EPSS
SaveExploits1References3
NVD
NVD
•added 2025/11/07 8:15 p.m.•22 views

CVE-2025-63638

Sourcecodester AI-Powered To-Do List App v1.0 is vulnerable to Cross-Site Scripting XSS in the "Task Title" and "Description Optional" fields when creating a Task, allowing an attacker to inject arbitrary potentially malicious HTML/JavaScript code that executes in the victim's browser upon clicki...

6.1CVSS0.00241EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2025/11/07 8:15 p.m.•19 views

CVE-2025-63638

Sourcecodester AI-Powered To-Do List App v1.0 is vulnerable to Cross-Site Scripting XSS in the "Task Title" and "Description Optional" fields when creating a Task, allowing an attacker to inject arbitrary potentially malicious HTML/JavaScript code that executes in the victim's browser upon clicki...

6.1CVSS6AI score0.00241EPSS
SaveExploits1References2
Rows per page
Query Builder