CVE-2019-25739

Name of the Vulnerable Software and Affected Versions GigToDo version 1.3

Description A persistent cross-site scripting issue allows authenticated attackers to inject malicious HTML and JavaScript code. This occurs via the proposal description field through the 'create proposal' endpoint. The injected code executes when administrators or other users view the stored proposal, which can lead to malicious redirects and the theft of cookies.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.