CVE-2022-40028

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullName parameter.

• CWE-79
• CWE-79

• https://github.com/xidaner/CVE_HUNTER/blob/main/CVE_09/2022-09-01-XSS2.mdExploit, Third Party Advisory
• https://www.sourcecodester.com/php/15624/simple-task-managing-system-php-mysqli-free-source-code.htmlProduct, Third Party Advisory
• https://github.com/xidaner/CVE_HUNTER/blob/main/CVE_09/2022-09-01-XSS2.mdExploit, Third Party Advisory
• https://www.sourcecodester.com/php/15624/simple-task-managing-system-php-mysqli-free-source-code.htmlProduct, Third Party Advisory

Published

Sep 21, 2022

Last Modified

Jul 9, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-4002A command injection vulnerability could allow an authenticat…7.2
• CVE-2022-40021QVidium Technologies Amino A140 (prior to firmware version 1…9.8
• CVE-2022-40022Microchip Technology (Microsemi) SyncServer S650 was discove…9.8
• CVE-2022-40023Sqlalchemy mako before 1.2.2 is vulnerable to Regular expres…7.5
• CVE-2022-40026SourceCodester Simple Task Managing System v1.0 was discover…7.2
• CVE-2022-40027SourceCodester Simple Task Managing System v1.0 was discover…6.1
• CVE-2022-40029SourceCodester Simple Task Managing System v1.0 was discover…4.8
• CVE-2022-4003A denial-of-service vulnerability could allow an authenticat…6.5
• CVE-2022-40030SourceCodester Simple Task Managing System v1.0 was discover…9.8
• CVE-2022-40032SQL Injection vulnerability in Simple Task Managing System v…9.8
• CVE-2022-40034Cross-Site Scripting (XSS) vulnerability found in Rawchen bl…5.4
• CVE-2022-40035File Upload Vulnerability found in Rawchen Blog-ssm v1.0 all…8.8