Threats tagged 'ghsa-wvcv-8mp3-7638'

CVE-2026-19344 is a SQL injection vulnerability in code-projects Task Management System 1.0 affecting the /user/comment_count_user.php file. The vulnerability arises from improper handling of the task_id parameter, allowing remote attackers to manipulate SQL queries. This flaw has a CVSS score of 7.3, indicating high severity. Public exploit code has been disclosed, but no official patch or remediation is currently available.