Medium severity6.5NVD Advisory· Published Oct 4, 2024· Updated Jun 17, 2026
CVE-2023-26771
CVE-2023-26771
Description
Taskcafe 0.3.2 is vulnerable to Cross Site Scripting (XSS). There is a lack of validation in the filetype when uploading a SVG profile picture with a XSS payload on it. An authenticated attacker can exploit this vulnerability by uploading a malicious picture which will trigger the payload when the victim opens the file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:taskcafe_project:taskcafe:0.3.2:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- bishopfox.com/blog/taskcafe-version-0-3-2-advisorynvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.