Chuck24 Simple To-Do List System vulnerabilities

CVE-2025-63709 [MEDIUM] CWE-79 CVE-2025-63709: A Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Simple To-Do List System 1.0 in A Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Simple To-Do List System 1.0 in the "Add Tasks" text input. An authenticated user can submit HTML/JavaScript that is not correctly sanitized or encoded on output. The injected script is stored and later rendered in the browser of any user who views the task, allowing execution of arbi

CVE-2025-10117 [MEDIUM] CWE-79 CVE-2025-10117: A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknow A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file /fetch_tasks.php of the component Add New Task. Executing manipulation with the input alert('XSS') can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the public and could

CVE-2025-4248 [MEDIUM] CWE-74 CVE-2025-4248: A vulnerability has been found in SourceCodester Simple To-Do List System 1.0 and classified as crit A vulnerability has been found in SourceCodester Simple To-Do List System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /complete_task.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used

CVE-2025-4247 [MEDIUM] CWE-74 CVE-2025-4247: A vulnerability, which was classified as critical, was found in SourceCodester Simple To-Do List Sys A vulnerability, which was classified as critical, was found in SourceCodester Simple To-Do List System 1.0. Affected is an unknown function of the file /delete_task.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.