CVE-2024-28276

Sourcecodester School Task Manager 1.0 is affected by a Cross-Site Scripting (XSS) flaw exploitable via add-task.php?task_name=. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE/CVEList, CVE enrichment feeds) with the same root cause: unsanitized input in the task_name p...

CVE-2024-24142

CVE-2024-24142 affects Sourcecodester School Task Manager 1.0. The issue is a SQL Injection in the GET parameter subject , caused by insufficient input handling. Impact is high (Confidentiality/Integrity/Availability) with CVSS v3.1 base score of 9.8 (NETWORK, LOW access complexity, NONE privileg...

CVE-2024-26517

CVE-2024-26517 is a SQL injection vulnerability in School Task Manager v1.0, exploitable via the delete-task.php component, allowing a remote attacker to obtain sensitive information. The linked documents consistently identify the affected software and component (School Task Manager 1.0, delete-t...