| Title | ruifang-tech Rebuild 3.8.6 Stored Cross Site Scripting |
|---|
| Description | A Stored Cross-Site Scripting (XSS) vulnerability exists in Rebuild 3.8.6, within the project task description input functionality. Attackers can exploit this vulnerability by injecting malicious JavaScript or HTML payloads into task descriptions. The payload is executed whenever any project group members view an affected task. |
|---|
| Source | ⚠️ https://github.com/cydtseng/Vulnerability-Research/blob/main/rebuild/StoredXSS-TaskDescription.md |
|---|
| User | vastzero (UID 78767) |
|---|
| Submission | 12/17/2024 14:53 (2 years ago) |
|---|
| Moderation | 12/27/2024 20:31 (10 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 289629 [ruifang-tech Rebuild 3.8.6 Project Tasks Section tasks Description cross site scripting] |
|---|
| Points | 18 |
|---|