CVE-2024-2935

Summary

CVE-2024-2935 is a newly disclosed vulnerability affecting the SourceCodester Todo List in Kanban Board 1.0. The issue lies within the component Add ToDo, which is susceptible to cross-site scripting (XSS) attacks. Malicious code can be injected through the manipulation of the argument Todo. This vulnerability can be exploited remotely, allowing attackers to execute malicious scripts in users' browsers. The exploit for this issue has been made public, increasing the risk for potential attacks. VDB-258014 is the identifier assigned to this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.