CVE-2024-3945

The WP To Do plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.0. This is due to missing or incorrect nonce validation on the wptodomanage function. This makes it possible for unauthenticated attackers to add new todo items via a forged...

CVE-2024-3945 WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_manage()

The WP To Do plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.0. This is due to missing or incorrect nonce validation on the wptodomanage function. This makes it possible for unauthenticated attackers to add new todo items via a forged...

PT-2024-28501 · WordPress · Wp To Do

Name of the Vulnerable Software and Affected Versions: WP To Do plugin for WordPress versions up to, and including, 1.3.0 Description: The issue is due to missing or incorrect nonce validation on the wptodo manage function, making it possible for unauthenticated attackers to add new todo items vi...

CVE-2024-2935

A vulnerability, which was classified as problematic, has been found in SourceCodester Todo List in Kanban Board 1.0. Affected by this issue is some unknown functionality of the component Add ToDo. The manipulation of the argument Todo leads to cross site scripting. The attack may be launched...

CVE-2024-2934

A vulnerability classified as critical was found in SourceCodester Todo List in Kanban Board 1.0. Affected by this vulnerability is an unknown functionality of the file /endpoint/delete-todo.php. The manipulation of the argument list leads to sql injection. The attack can be launched remotely. Th...

CVE-2024-2934

A vulnerability classified as critical was found in SourceCodester Todo List in Kanban Board 1.0. Affected by this vulnerability is an unknown functionality of the file /endpoint/delete-todo.php. The manipulation of the argument list leads to sql injection. The attack can be launched remotely. Th...

CVE-2024-2935 SourceCodester Todo List in Kanban Board Add ToDo cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Todo List in Kanban Board 1.0. Affected by this issue is some unknown functionality of the component Add ToDo. The manipulation of the argument Todo leads to cross site scripting. The attack may be launched...

CVE-2024-2935 SourceCodester Todo List in Kanban Board Add ToDo cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Todo List in Kanban Board 1.0. Affected by this issue is some unknown functionality of the component Add ToDo. The manipulation of the argument Todo leads to cross site scripting. The attack may be launched...

CVE-2024-2934 SourceCodester Todo List in Kanban Board delete-todo.php sql injection

A vulnerability classified as critical was found in SourceCodester Todo List in Kanban Board 1.0. Affected by this vulnerability is an unknown functionality of the file /endpoint/delete-todo.php. The manipulation of the argument list leads to sql injection. The attack can be launched remotely. Th...

CVE-2024-2934

CVE-2024-2934 affects SourceCodester Todo List in Kanban Board 1.0. The vulnerability is an SQL injection in the /endpoint/delete-todo.php endpoint, triggered by manipulation of the list argument. It is exploitable remotely, with exploit details publicly disclosed. Multiple sources corroborate th...

CVE-2024-2934 SourceCodester Todo List in Kanban Board delete-todo.php sql injection

A vulnerability classified as critical was found in SourceCodester Todo List in Kanban Board 1.0. Affected by this vulnerability is an unknown functionality of the file /endpoint/delete-todo.php. The manipulation of the argument list leads to sql injection. The attack can be launched remotely. Th...

Todo List in Kanban Board SQL注入漏洞

Todo List in Kanban Board is a to-do list for rems personal developers. Todo List in Kanban Board version 1.0 suffers from a SQL injection vulnerability in the list parameter of the /endpoint/delete-todo.php file...

Todo List in Kanban Board 跨站脚本漏洞

Todo List in Kanban Board is a to-do list for rems individual developers. A cross-site scripting vulnerability exists in Todo List in Kanban Board version 1.0, which stems from a cross-site scripting vulnerability in the Todo parameter of the Add ToDo component...

PT-2024-22865 · Unknown · Sourcecodester Todo List In Kanban Board

Name of the Vulnerable Software and Affected Versions: SourceCodester Todo List in Kanban Board version 1.0 Description: A problematic issue has been found in the Add ToDo component, where the manipulation of the Todo argument leads to cross-site scripting. This issue can be exploited remotely. T...

PT-2024-22864 · Sourcecodester · Sourcecodester Todo List In Kanban Board

Name of the Vulnerable Software and Affected Versions: SourceCodester Todo List in Kanban Board version 1.0 Description: A critical issue was found in the software, affecting an unknown functionality of the file "/endpoint/delete-todo.php". The manipulation of the list argument leads to SQL...

Leantime Systems Leantime Security Vulnerabilities

Leantime Systems Leantime is an open source project management system based on PHP and MySQL from Leantime Systems. A security vulnerability exists in Leantime version 3.0.6 due to a stored cross-site scripting XSS vulnerability in the to-do title parameter...

CVE-2024-27703

Cross Site Scripting vulnerability in Leantime 3.0.6 allows a remote attacker to execute arbitrary code via the to-do title parameter...

BIT-GITLAB-2020-13346

Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential issues through API...

CVE-2022-45179

An issue was discovered in LIVEBOX Collaboration vDesk through v031. A basic XSS vulnerability exists under the /api/v1/vdeskintegration/todo/createorupdate endpoint via the title parameter and /dashboard/reminders. A remote user authenticated to the product can store arbitrary HTML code in the...

CVE-2022-45179

An issue was discovered in LIVEBOX Collaboration vDesk through v031. A basic XSS vulnerability exists under the /api/v1/vdeskintegration/todo/createorupdate endpoint via the title parameter and /dashboard/reminders. A remote user authenticated to the product can store arbitrary HTML code in the...