CVE-2022-40027

MediumCVSS 6.1

Published: 21/09/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.53%

41th percentile - higher than 41% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability was discovered in SourceCodester Simple Task Managing System v1.0 via the newTask.php component. Attackers can inject arbitrary web scripts or HTML through the shortName parameter.

Risk Assessment

The risk includes execution of malicious scripts in the victim's browser, potentially leading to session hijacking, redirects, or data theft.

Recommendation

Update the system to the latest version or implement input filtering and validation for the shortName parameter.

Original NVD description (English source)

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newTask.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the shortName parameter.