Findings

CVE-2026-29828

DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the /manage/project/ page via the input field projectDesc.

Published Mar 20, 2026 · updated Jun 17, 2026 · dootask dootask

DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the /manage/project/ page via the input field projectDesc.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 20, 2026 · NIST NVD

    Detected

    DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the /manage/project/ page via the input field projectDesc.

  2. Jun 17, 2026 · NIST NVD

    Updated

    DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the /manage/project/ page via the input field projectDesc.

Affected

  • cpe dootask/dootaskversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-29828

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-29828

    DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the /manage/project/ page via the input field projectDesc.

    nvd.nist.gov

References

CVE-2026-29828 · ZeroDay Findings