CVE-2019-13144

CRITICAL

myTinyTodo <1.5 - Code Injection

Title source: llm

myTinyTodo 1.3.3 through 1.4.3 allows CSV Injection. This is fixed in 1.5.

nomisec NO CODE

by cccaaasser · poc

CVSS v3 9.8

EPSS 0.0105

EPSS Percentile 77.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-1236

Status published

Products (1)

mytinytodo/mytinytodo 1.3.3 - 1.4.3

Published Jul 05, 2019

Tracked Since Feb 18, 2026