← Database

CVE-2024-53554

HIGH CVSS: 8.0 Published: 2024-11-25 Modified: 2026-06-17

Description

A Client-Side Template Injection (CSTI) vulnerability in the component /project/new/scrum of Taiga v 8.6.1 allows remote attackers to execute arbitrary code by injecting a malicious payload within the new project details.

Affected Platforms

Unknown

Weakness Type

CWE-94

References