Remyandrade Ai-powered To-do List App vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Remyandrade Ai-powered To-do List App: 1 record(s), with affected versions and fixes.cpe:2.3:a:remyandrade:ai-powered_to-do_list_app
CVE-2025-63638
Medium · 6.1
CWE-79 Nov 7, 2025
Cross-site Scripting (XSS) in Remyandrade Ai-powered To-do List App
Sourcecodester AI-Powered To-Do List App v1.0 is vulnerable to Cross-Site Scripting (XSS) in the "Task Title" and "Description (Optional)" fields when creating a Task, allowing an attacker to inject arbitrary potentially malicious HTML/JavaScript code that executes in the victim's browser upon clicking the "Add Task" button.