Is CVE-2024-13073 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2024-13073 being exploited in the wild.

How severe is CVE-2024-13073?

Medium severity, with a CVSS score of 4.7, published 4 September 2025.

Is there a fix for CVE-2024-13073?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2024-13073 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2024-13073?

Check whether you run AKINSOFT TaskPano at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2024-13073: Akinsoft TaskPano cross-site scripting

CVE-2024-13073 · Severity: medium · CVSS 4.7 · Published 2025-09-04

Akinsoft TaskPano, a project and task management platform, contains a security vulnerability that allows for cross-site scripting. An attacker with high-level administrative privileges can inject malicious scripts into the application's web pages. This could lead to unauthorized actions being performed in the context of other users' sessions or the theft of sensitive information within the platform.

Vendors: AKINSOFT.

Quick answers

Is CVE-2024-13073 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2024-13073 being exploited in the wild.
How severe is CVE-2024-13073?: Medium severity, with a CVSS score of 4.7, published 4 September 2025.
Which products and versions are affected?: AKINSOFT TaskPano s1.06.04.
Is there a fix for CVE-2024-13073?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2024-13073 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2024-13073?: Check whether you run AKINSOFT TaskPano at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

Akinsoft TaskPano version s1.06.04 is vulnerable to Cross-Site Scripting (XSS) classified under CWE-79. The vulnerability stems from the improper neutralization of user-supplied input during the generation of web pages, allowing an attacker to inject arbitrary JavaScript. According to the CVSS metrics, the attack requires high privileges (PR:H) but no user interaction (UI:N), suggesting a stored XSS vector where an administrator can persist a payload that executes in the browsers of other users. Successful exploitation can impact the confidentiality, integrity, and availability of the application session.

Affected products

Akinsoft TaskPano s1.06.04

Timeline

2025-09-04: advisory: Initial disclosure by TR-CERT/USOM

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.