high8.8
CVE-2022-39398
tasklists is a tasklists plugin for GLPI (Kanban).
Impact
tasklists is a tasklists plugin for GLPI (Kanban). Versions prior to 2.0.3 are vulnerable to Cross-site Scripting. Cross-site Scripting (XSS) - Create XSS in task content (when add it). This issue is patched in version 2.0.3. There are no known workarounds.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Infotel | Tasklists | before 2.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/InfotelGLPI/tasklists/commit/4a1b30f3d9fa764695f98ce011c8542772530d47
- https://github.com/InfotelGLPI/tasklists/security/advisories/GHSA-3qv3-8393-777q
- https://github.com/InfotelGLPI/tasklists/commit/4a1b30f3d9fa764695f98ce011c8542772530d47
- https://github.com/InfotelGLPI/tasklists/security/advisories/GHSA-3qv3-8393-777q