CVE-2025-63638 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Sourcecodester AI-Powered To-Do List App v1.0 is vulnerable to Cross-Site Scripting (XSS) in the "Task Title" and "Description (Optional)" fields when creating…
Medium CVSS: 6.1

CVE-2025-63638

Sourcecodester AI-Powered To-Do List App v1.0 is vulnerable to Cross-Site Scripting (XSS) in the "Task Title" and "Description (Optional)" fields when creating a Task, allowing an attacker to inject arbitrary potentially malicious HTML/JavaScript code that executes in the victim's browser upon clicking the "Add Task" button.
Vendor
Remyandrade
Product
Ai-powered To-do List App
CWE
CWE-79
Yayın Tarihi
2025-11-07 20:15:37
Güncelleme
2025-11-17 18:46:06
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-79 Ai-powered To-do List App MEDIUM Remyandrade 2025

Referanslar

https://github.com/ChuckBartowski7/Vulnerability-Research/tree/main/CVE-2025-63638 https://www.sourcecodester.com/javascript/18421/ai-powered-do-list-app-using-html-css-and-javascript-source-code.html