CVE-2026-29828: XSS
Published Mar 20, 2026
·Updated
DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the /manage/project/<id> page via the input field projectDesc.
Affected Software
2 affected components
dootask dootask=1.6.27
dootask dootask<=1.6.27
Event History
Mar 20, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-29828?
The severity of CVE-2026-29828 is medium with a CVSS score of 6.1.
2
What type of vulnerability is CVE-2026-29828?
CVE-2026-29828 is a Cross-Site Scripting (XSS) vulnerability.
3
How does CVE-2026-29828 affect DooTask?
CVE-2026-29828 affects DooTask v1.6.27 through the projectDesc input field on the /manage/project/<id> page.
4
How can I mitigate CVE-2026-29828?
To mitigate CVE-2026-29828, validate and sanitize user inputs in the affected fields to prevent XSS attacks.
5
What versions of DooTask are impacted by CVE-2026-29828?
DooTask v1.6.27 is impacted by CVE-2026-29828.