CVE-2022-39398: Infotel Tasklists

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

tasklists is a tasklists plugin for GLPI (Kanban). Versions prior to 2.0.3 are vulnerable to Cross-site Scripting. Cross-site Scripting (XSS) - Create XSS in task content (when add it). This issue is patched in version 2.0.3. There are no known workarounds.

Affected products

• Infotel Tasklists: before 2.0.3 (fixed in 2.0.3)

Published 2022-11-10. Last modified 2026-06-17.