Code-Projects Task Manager vulnerabilities

6 CVEs affecting Code-Projects Task Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-11096, published 2024-11-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-25222, published 2024-02-14. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the projectID parameter at /TaskManager/EditProject.php.
CVE-2024-25220, published 2024-02-14. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the taskID parameter at /TaskManager/EditTask.php.
CVE-2024-11096, published 2024-11-12. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in code-projects Task Manager 1.0. This affects an unknown part of the file /newProject.php. The manipulation of the argument projectName…
CVE-2024-25219, published 2024-02-14. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Task Name parameter…
CVE-2024-25221, published 2024-02-14. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Note Section parameter at…
CVE-2024-25218, published 2024-02-14. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Project Name parameter…