https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T12:33:08.962150+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-3137 CVE-2022-3137 — TaskBuilder < 1.0.8 - Subscriber+ Stored XSS via SVG file upload 2026-10-05T12:33:08.978295+00:00

Affected: Unknown Taskbuilder – WordPress Project & Task Management plugin

The Taskbuilder WordPress plugin before 1.0.8 does not validate and sanitise task's attachments, which could allow any authenticated user (such as subscriber) creating a task to perform Stored Cross-Site Scripting by attaching a malicious SVG file