Lucene search
Asura-nC96F3480-DCCF-4CC2-99A4-D2B3A7462413HistoryNov 18, 2021 - 2:59 p.m.
Cross-site Scripting (XSS) - Stored in kevinpapst/kimai2
2021-11-1814:59:38
asura-n
www.huntr.dev
4
cross-site scripting
stored
kevinpapst/kimai2
customer
vulnerability
user session
bug bounty
EPSS
0.001
Percentile
33.3%
Description
Cross site scripting vulnerability in name field on customer edit form
Proof of Concept
place this payload in customer name field and save "><img src>
# Impact
This vulnerability is capable of stolen the user sessionRelated
osv
osv
Cross-site Scripting in kimai2
2021-12-03 20:43:06
CVE-2021-3983
2021-12-01 12:15:07
cnvd
cnvd
kimai2 cross-site scripting vulnerability
2021-12-02 00:00:00
cvelist
cvelist
CVE-2021-3983 Cross-site Scripting (XSS) - Stored in kevinpapst/kimai2
2021-12-01 11:15:12
nvd
nvd
CVE-2021-3983
2021-12-01 12:15:07
cve
cve
CVE-2021-3983
2021-12-01 12:15:07
prion
prion
Cross site scripting
2021-12-01 12:15:00
github
github
Cross-site Scripting in kimai2
2021-12-03 20:43:06
veracode
veracode
Cross-site Scripting (XSS)
2021-12-02 02:48:33