| Package | Affected versions | Patched versions |
|---|---|---|
| todoist | = 8484 |
Todoist v8484 contains a stored cross-site scripting (XSS) vulnerability in the avatar upload functionality. The application fails to properly validate the MIME type and sanitize image metadata.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free