Lucene search
GoogleOSV:CVE-2017-1000466HistoryJan 03, 2018 - 1:29 a.m.
CVE-2017-1000466
2018-01-0301:29:00
Google
osv.dev
5
0.001 Low
EPSS
Percentile
26.4%
Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| invoiceninja | eq | 2.6.3 | |
| invoiceninja | eq | 2.6.9 | |
| invoiceninja | eq | 2.9.0 | |
| invoiceninja | eq | 3.1.0 | |
| invoiceninja | eq | 2.7.1 | |
| invoiceninja | eq | 3.6.1 | |
| invoiceninja | eq | 2.6 | |
| invoiceninja | eq | 2.6.5 | |
| invoiceninja | eq | 2.4.3 | |
| invoiceninja | eq | 3.0.3 |
Related
prion
prion
Cross site scripting
2018-01-03 01:29:00
cve
cve
CVE-2017-1000466
2022-10-03 16:23:10
nvd
nvd
CVE-2017-1000466
2018-01-03 01:29:00
cvelist
cvelist
CVE-2017-1000466
2022-10-03 16:23:10