CVE-2026-86181mediumCWE-79CWE-94

CVE-2026-86181: medium-severity vulnerability in code-projects Task Management System

code-projects Task Management System User Profile Update UpdateUserProfile.php cross site scripting

Published · Updated

Follow this CVE+ Monitor Task Management System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 5.1epss 0.4%
A vulnerability was found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/UpdateUserProfile.php of the component User Profile Update. The manipulation of the argument lname results in cross site scripting. The attack can be launched remotely. The exploit has been made public and could be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Affected products
code-projects · Task Management System
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — code-projects Task Management System

In the same product, most dangerous first.

CVE-2026-19342MEDIUMcode-projects Task Management System Login index.php improper authenticationEPSS 0.7%CVE-2026-19345MEDIUMcode-projects Task Management System UpdateTaskStatus.php authorizationEPSS 0.5%CVE-2026-19378MEDIUMcode-projects Task Management System CommentSave.php cross site scriptingEPSS 0.5%CVE-2026-75778MEDIUMcode-projects Task Management System Login Form index.php select_with_multiple_condition sql injectionEPSS 0.4%CVE-2026-19344MEDIUMcode-projects Task Management System comment_count_user.php sql injectionEPSS 0.4%CVE-2026-19343MEDIUMcode-projects Task Management System AdminLogin.php sql injectionEPSS 0.4%