VulnSocial

CVE-2026-29828General(dootask / dootask)

LOWCVSS 6.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the /manage/project/<id> page via the input field projectDesc.

dootask CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • dootask

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-03-20); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
dootask
Products
dootask

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-03-20: 1Mentions · 2026-03-22: 1Technical Details · 2026-03-20: 1Technical Details · 2026-03-22: 103-2003-22
Signal classification2 categories
General
150.0%
Disclosure
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-03-201
General1
2026-03-221
Disclosure1
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-29828 DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the /manage/project/&lt;id&gt; page via the input field projectDesc. https://www.cve.org/CVERecord?id=CVE-2026-29828

    Post summary

    The text discloses an XSS flaw in DooTask v1.6.27, specifying the vulnerable endpoint and input field, but does not mention exploits, patches, or active use.

    00000161
    56.8K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-29828 Cross-Site Scripting Vulnerability in DooTask v1.6.27 Project Description Field https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-29828

    Post summary

    CVE‑2026‑29828 is an XSS flaw in the Project Description field of DooTask v1.6.27, detailed on VulMon, with no PoC, exploit, patch, or active exploitation reported.

    0000035
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appdootaskdootask---

Explore more

Back to dashboarddootask CVEsdootask vulnerabilities