Input validation vulnerability in Task Manager Pro – Task Management Plugin For WordPress 1.3.1

The Task Manager Pro plugin for WordPress, which is used up to version 1.3.1, is vulnerable to a type of attack known as Reflected Cross-Site Scripting. This type of attack involves malicious code being injected into a page, which will execute when a user accesses that page. To do this, an attacker must be able to trick the user into clicking a malicious link. This vulnerability is caused by the plugin not properly sanitizing or escaping the “task” parameter.