Approved changes feed: RSS · Atom

cpe:2.3:a:remyandrade:ai-powered_to-do_list_app:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorRemyandrade (778e90e9-129a-5d15-ad71-c8bb9070dcc5)
ProductAi Powered To Do List App (268cd290-58e3-5ca2-aa36-8a2a171fe820)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-63638 vulnerable 2026-06-03 15:09:36.773254 Details available
Sourcecodester AI-Powered To-Do List App v1.0 is vulnerable to Cross-Site Scripting (XSS) in the "Task Title" and "Description (Optional)" fields when creating a Task, allowing an attacker to inject arbitrary potentially malicious HTML/JavaScript code that executes in the victim's browser upon clicking the "Add Task" button.
Published: 2025-11-07T00:00:00.000Z
Updated: 2025-11-12T19:53:48.931Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.