Non notée
CVE-2022-3137 The Taskbuilder WordPress plugin before 1.0.8 does not validate and sanitise task's attachments, which could allow any…
Description
The Taskbuilder WordPress plugin before 1.0.8 does not validate and sanitise task's attachments, which could allow any authenticated user (such as subscriber) creating a task to perform Stored Cross-Site Scripting by attaching a malicious SVG file
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Taskbuilder – WordPress Project & Task Management plugin 1.0 | premières → < 1.0.8 | 1.0.8 |