Lucene search
GoogleOSV:GHSA-9XMX-RJ7J-FV9QHistoryMay 24, 2022 - 4:50 p.m.
Firefly III vulnerable to stored XSS
2022-05-2416:50:36
Google
osv.dev
5
firefly iii
stored xss
filtration
user-supplied data
budget name
javascript code
tag summary page
Firefly III before 4.7.17.1 is vulnerable to stored XSS due to lack of filtration of user-supplied data in a budget name. The JavaScript code is contained in a transaction, and is executed on the tags/show/$tag_number$ tag summary page.
Related
nvd
nvd
CVE-2019-13644
2019-07-18 03:15:10
vulnrichment
vulnrichment
CVE-2019-13644
2019-07-18 02:17:24
veracode
veracode
Cross-site Scripting (XSS)
2019-07-18 05:59:47
cvelist
cvelist
CVE-2019-13644
2019-07-18 02:17:24
github
github
Firefly III vulnerable to stored XSS
2022-05-24 16:50:36
prion
prion
Design/Logic Flaw
2019-07-18 03:15:00
cve
cve
CVE-2019-13644
2019-07-18 03:15:10