https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-40032.htmlhttps://patchthecve.com/cve/CVE-2022-40032.htmlWed, 17 Jun 2026 05:00:47 +0000CRITICAL 9.8: SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information.https://patchthecve.com/cve/CVE-2022-40030.htmlhttps://patchthecve.com/cve/CVE-2022-40030.htmlThu, 09 Jul 2026 01:17:43 +0000CRITICAL 9.8: SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at changeStatus.php.https://patchthecve.com/cve/CVE-2022-40029.htmlhttps://patchthecve.com/cve/CVE-2022-40029.htmlThu, 09 Jul 2026 01:17:43 +0000MEDIUM 4.8: SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the shortName parameter.https://patchthecve.com/cve/CVE-2022-40028.htmlhttps://patchthecve.com/cve/CVE-2022-40028.htmlThu, 09 Jul 2026 01:17:43 +0000MEDIUM 4.8: SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullName parameter.https://patchthecve.com/cve/CVE-2022-40027.htmlhttps://patchthecve.com/cve/CVE-2022-40027.htmlThu, 09 Jul 2026 01:17:42 +0000MEDIUM 6.1: SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newTask.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the shortName parameter.https://patchthecve.com/cve/CVE-2022-40026.htmlhttps://patchthecve.com/cve/CVE-2022-40026.htmlWed, 17 Jun 2026 05:00:47 +0000HIGH 7.2: SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at board.php.https://patchthecve.com/cve/CVE-2022-3014.htmlhttps://patchthecve.com/cve/CVE-2022-3014.htmlWed, 17 Jun 2026 04:58:38 +0000LOW 3.5: A vulnerability classified as problematic was found in SourceCodester Simple Task Managing System. This vulnerability affects unknown code. The manipulation of the argument student_add leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-20https://patchthecve.com/cve/CVE-2022-3013.htmlhttps://patchthecve.com/cve/CVE-2022-3013.htmlWed, 17 Jun 2026 04:58:38 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in SourceCodester Simple Task Managing System. This affects an unknown part of the file /loginVaLidation.php. The manipulation of the argument login leads to sql injection. It is possible to initiate the attack remotely. The associated identifier