CVE-2026-19378

Name of the Vulnerable Software and Affected Versions code-projects Task Management System version 1.0

Description An issue exists in the processing of the '/user/CommentSave.php' endpoint. Remote attackers can trigger cross site scripting (XSS)—a technique used to inject malicious scripts into web pages viewed by other users—by manipulating the comment, task id, mineId, recId, myName, or myImage arguments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.