PatchTheCVE: dootaskhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2026-29828: DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the /manage/project/<id> page via the input https://patchthecve.com/cve/CVE-2026-29828.htmlhttps://patchthecve.com/cve/CVE-2026-29828.htmlWed, 17 Jun 2026 10:29:54 +0000MEDIUM 6.1: DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the /manage/project/<id> page via the input field projectDesc.CVE-2025-55455: DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /https://patchthecve.com/cve/CVE-2025-55455.htmlhttps://patchthecve.com/cve/CVE-2025-55455.htmlWed, 17 Jun 2026 09:41:45 +0000LOW 3.5: DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext.CVE-2025-55454: An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allowshttps://patchthecve.com/cve/CVE-2025-55454.htmlhttps://patchthecve.com/cve/CVE-2025-55454.htmlWed, 17 Jun 2026 09:41:45 +0000HIGH 8.8: An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrary code via uploading a crafted file.