Lucene search
PRIOn knowledge basePRION:CVE-2019-7223HistoryMar 21, 2019 - 4:01 p.m.
Cross site scripting
2019-03-2116:01:00
PRIOn knowledge base
www.prio-n.com
3
InvoicePlane 1.5 has stored XSS via the index.php/invoices/ajax/save invoice_password parameter, aka the “PDF password” field to the “Create Invoice” option. The XSS payload is rendered at an index.php/invoices/view/## URI. NOTE: this is different from CVE-2018-12255.
| CPE | Name | Operator | Version |
|---|---|---|---|
| invoiceplane | ge | 1.5.0 | |
| invoiceplane | le | 1.5.9 |
References
Related
osv
osv
CVE-2019-7223
2019-03-21 16:01:11
CVE-2018-12255
2018-07-03 12:29:00
cvelist
cvelist
CVE-2019-7223
2019-03-16 12:00:00
CVE-2018-12255
2018-07-03 11:00:00
cve
cve
CVE-2019-7223
2019-03-21 16:01:11
CVE-2018-12255
2018-07-03 12:29:00
nvd
nvd
CVE-2019-7223
2019-03-21 16:01:11
CVE-2018-12255
2018-07-03 12:29:00
prion
prion
Cross site scripting
2018-07-03 12:29:00