Cross site scripting

2022-12-1519:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

expense tracker

arbitrary scripts

crafted payload

chat field

0.001 Low

EPSS

Percentile

23.3%

JSON

A cross-site scripting (XSS) vulnerability in Expense Tracker 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat text field.

CPENameOperatorVersion
expense_trackereq1.0

CPE	Name	Operator	Version
	expense_tracker	eq	1.0

References

github.com/cyb3r-n3rd/cve-request/blob/main/cve-poc-payload

0.001 Low

EPSS

Percentile

23.3%

JSON

Related for PRION:CVE-2022-45033