CyberRota Analysis
AI-GeneratedA cross-site scripting vulnerability exists in the User Profile Update functionality of the Task Management System, specifically in the /user/UpdateUserProfile.php file, where manipulation of the 'lname' argument can lead to unauthorized script execution. Although the severity is rated low, the exploit is publicly available and can be executed remotely, making it a potential risk for users of the affected system. Organizations utilizing this software should prioritize patching or mitigating this vulnerability to safeguard against possible exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/UpdateUserProfile.php of the component User Profile Update. The manipulation of the argument lname results in cross site scripting. The attack can be launched remotely. The exploit has been made public and could be used.