cvedb.io
CVE-2022-39398
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2022-11-10T01:15:12.333 · Last modified 2026-06-17T04:58:16.923

Summary

tasklists is a tasklists plugin for GLPI (Kanban). Versions prior to 2.0.3 are vulnerable to Cross-site Scripting. Cross-site Scripting (XSS) - Create XSS in task content (when add it). This issue is patched in version 2.0.3. There are no known workarounds.

Affected products

infotel — tasklists

Does this affect you?

Add your gear to cvedb and we'll alert you only when infotel ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.