Threats tagged 'ghsa-4x55-4jgw-65pj'

CVE-2025-63709 is a stored Cross-Site Scripting (XSS) vulnerability in SourceCodester Simple To-Do List System 1.0. It occurs in the "Add Tasks" input where authenticated users can submit malicious HTML/JavaScript that is not properly sanitized. This script is stored and executed in the browsers of users who view the affected tasks, enabling arbitrary script execution in their context.