Description (CNA)
tasklists is a tasklists plugin for GLPI (Kanban). Versions prior to 2.0.3 are vulnerable to Cross-site Scripting. Cross-site Scripting (XSS) - Create XSS in task content (when add it). This issue is patched in version 2.0.3. There are no known workarounds.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| InfotelGLPI / tasklists | affected < 2.0.3 |
CWE
CWE-79
References
- https://github.com/InfotelGLPI/tasklists/security/advisories/GHSA-3qv3-8393-777q
- https://github.com/InfotelGLPI/tasklists/commit/4a1b30f3d9fa764695f98ce011c8542772530d47
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.