Cross site scripting

2018-01-0301:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

26.4%

JSON

Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code.

CPENameOperatorVersion
invoice_ninjaeq3.8.1

CPE	Name	Operator	Version
	invoice_ninja	eq	3.8.1

References

github.com/invoiceninja/invoiceninja/issues/1727

0.001 Low

EPSS

Percentile

26.4%

JSON

Related for PRION:CVE-2017-1000466