Is CVE-2026-19378 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-19378?

CVE-2026-19378 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-19378

Description

A vulnerability was found in code-projects Task Management System 1.0. This issue affects some unknown processing of the file /user/CommentSave.php. The manipulation of the argument comment/task_id/mineId/recId/myName/myImage results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used.