CVE-2024-41805 | BDVDB-2026-243649 Detail

Description#

Tracks, a Getting Things Done (GTD) web application, is vulnerable to reflected cross-site scripting in versions prior to 2.7.1. Reflected cross-site scripting enables execution of malicious JavaScript in the context of a user’s browser if that user clicks on a malicious link, allowing phishing attacks that could lead to credential theft. Tracks version 2.7.1 is patched. No known complete workarounds are available.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12024-07-26Record published in the CVE List.
2. Version 22024-08-02Most recent update recorded in the CVE List.