Infotel: >> Tasklists >> 2.0.0 Security Vulnerabilities
Tasklists provides plugin tasklists for GLPI. Versions prior to 2.0.4 have a blind SQL injection vulnerability. Version 2.0.4 contains a patch for the vulnerability.
CVSS Score
9.8
EPSS Score
0.016
Published
2024-12-30
tasklists is a tasklists plugin for GLPI (Kanban). Versions prior to 2.0.3 are vulnerable to Cross-site Scripting. Cross-site Scripting (XSS) - Create XSS in task content (when add it). This issue is patched in version 2.0.3. There are no known workarounds.
CVSS Score
8.8
EPSS Score
0.001
Published
2022-11-10