Sourcecodester Simple To-Do List System vulnerabilities

CVE-2025-10117 [MEDIUM] CWE-79 CVE-2025-10117: A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknow A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file /fetch_tasks.php of the component Add New Task. Executing manipulation with the input alert('XSS') can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the public and could

CVE-2025-4248 [MEDIUM] CWE-74 CVE-2025-4248: A vulnerability has been found in SourceCodester Simple To-Do List System 1.0 and classified as crit A vulnerability has been found in SourceCodester Simple To-Do List System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /complete_task.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used

CVE-2025-4247 [MEDIUM] CWE-74 CVE-2025-4247: A vulnerability, which was classified as critical, was found in SourceCodester Simple To-Do List Sys A vulnerability, which was classified as critical, was found in SourceCodester Simple To-Do List System 1.0. Affected is an unknown function of the file /delete_task.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.