CVE-2017-1000508

2018-02-0923:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

40.7%

JSON

Invoice Plane version 1.5.4 and earlier contains a Cross Site Scripting (XSS) vulnerability in Client’s details that can result in execution of javascript code . This vulnerability appears to have been fixed in 1.5.5 and later.

CPENameOperatorVersion
invoiceplaneeq1.3.2
invoiceplaneeq1.5.0-beta.3
invoiceplaneeq1.0.0
invoiceplaneeq1.3.3
invoiceplaneeq1.5.0-beta.1
invoiceplaneeq1.5.3
invoiceplaneeq1.4.6
invoiceplaneeq1.0.1
invoiceplaneeq1.5.1
invoiceplaneeq1.4.3

Name	Operator	Version
invoiceplane	eq	1.3.2
invoiceplane	eq	1.5.0-beta.3
invoiceplane	eq	1.0.0
invoiceplane	eq	1.3.3
invoiceplane	eq	1.5.0-beta.1
invoiceplane	eq	1.5.3
invoiceplane	eq	1.4.6
invoiceplane	eq	1.0.1
invoiceplane	eq	1.5.1
invoiceplane	eq	1.4.3