Filtered by vendor Chuck24 Subscriptions
Filtered by product Simple To-do List System Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-63709 2 Chuck24, Sourcecodester 2 Simple To-do List System, Simple Todo List System 2025-11-18 4.6 Medium
A Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Simple To-Do List System 1.0 in the "Add Tasks" text input. An authenticated user can submit HTML/JavaScript that is not correctly sanitized or encoded on output. The injected script is stored and later rendered in the browser of any user who views the task, allowing execution of arbitrary script in the context of the victim's browser.
CVE-2025-10117 1 Chuck24 1 Simple To-do List System 2025-09-10 3.5 Low
A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file /fetch_tasks.php of the component Add New Task. Executing manipulation with the input <script>alert('XSS')</script> can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.
CVE-2025-4248 1 Chuck24 1 Simple To-do List System 2025-05-13 6.3 Medium
A vulnerability has been found in SourceCodester Simple To-Do List System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /complete_task.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-4247 1 Chuck24 1 Simple To-do List System 2025-05-13 6.3 Medium
A vulnerability, which was classified as critical, was found in SourceCodester Simple To-Do List System 1.0. Affected is an unknown function of the file /delete_task.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.