DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the /manage/project/<id> page via the input field projectDesc.

Published Mar 20, 2026 · Updated Mar 23, 2026 · Assigned by mitre