invoiceninja is vulnerable to Cross-site Scripting

2022-01-0621:58:34

Google

osv.dev

0.001 Low

EPSS

Percentile

21.6%

JSON

invoiceninja is vulnerable to Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)

CPENameOperatorVersion
hillelcoren/invoice-ninjaeq5.1.71
hillelcoren/invoice-ninjaeq5.1.69
hillelcoren/invoice-ninjaeq2.5.2.2
hillelcoren/invoice-ninjaeq5.1.50
hillelcoren/invoice-ninjaeq2.6.10
hillelcoren/invoice-ninjaeq4.3.1
hillelcoren/invoice-ninjaeq5.1.3
hillelcoren/invoice-ninjaeq5.1.14
hillelcoren/invoice-ninjaeq5.0.54
hillelcoren/invoice-ninjaeq5.2.5

Name	Operator	Version
hillelcoren/invoice-ninja	eq	5.1.71
hillelcoren/invoice-ninja	eq	5.1.69
hillelcoren/invoice-ninja	eq	2.5.2.2
hillelcoren/invoice-ninja	eq	5.1.50
hillelcoren/invoice-ninja	eq	2.6.10
hillelcoren/invoice-ninja	eq	4.3.1
hillelcoren/invoice-ninja	eq	5.1.3
hillelcoren/invoice-ninja	eq	5.1.14
hillelcoren/invoice-ninja	eq	5.0.54
hillelcoren/invoice-ninja	eq	5.2.5