A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Note Section parameter at /TaskManager/Tasks.php.
                
            References
                    | Link | Resource | 
|---|---|
| https://github.com/BurakSevben/CVEs/blob/main/Task%20Manager%20App/Task%20Manager%20App%20-%20Cross-Site-Scripting%20-3.md | Exploit Third Party Advisory | 
| https://github.com/BurakSevben/CVEs/blob/main/Task%20Manager%20App/Task%20Manager%20App%20-%20Cross-Site-Scripting%20-3.md | Exploit Third Party Advisory | 
Configurations
                    Configuration 1 (hide)
| 
 | 
History
                    21 Nov 2024, 09:00
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () https://github.com/BurakSevben/CVEs/blob/main/Task%20Manager%20App/Task%20Manager%20App%20-%20Cross-Site-Scripting%20-3.md - Exploit, Third Party Advisory | 
16 Feb 2024, 19:33
| Type | Values Removed | Values Added | 
|---|---|---|
| CPE | cpe:2.3:a:task_manager_in_php_with_source_code_project:task_manager_in_php_with_source_code:1.0:*:*:*:*:*:*:* | |
| CWE | CWE-79 | |
| CVSS | v2 : v3 : | v2 : unknown v3 : 6.1 | 
| First Time | Task Manager In Php With Source Code Project Task Manager In Php With Source Code Project task Manager In Php With Source Code | |
| References | () https://github.com/BurakSevben/CVEs/blob/main/Task%20Manager%20App/Task%20Manager%20App%20-%20Cross-Site-Scripting%20-3.md - Exploit, Third Party Advisory | 
14 Feb 2024, 16:13
| Type | Values Removed | Values Added | 
|---|---|---|
| New CVE | 
Information
                Published : 2024-02-14 15:15
Updated : 2025-05-12 15:15
NVD link : CVE-2024-25221
Mitre link : CVE-2024-25221
CVE.ORG link : CVE-2024-25221
JSON object : View
Products Affected
                task_manager_in_php_with_source_code_project
- task_manager_in_php_with_source_code
CWE
                
                    
                        
                        CWE-79
                        
            Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
