CVE-2023-39707

2023-08-2500:00:00

mitre

www.cve.org

cross-site scripting

free inventory system

add expense parameter

expense section

0.001 Low

EPSS

Percentile

20.0%

JSON

A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add Expense parameter under the Expense section.