Lucene search
PRIOn knowledge basePRION:CVE-2023-6426HistoryNov 30, 2023 - 2:15 p.m.
Design/Logic Flaw
2023-11-3014:15:00
PRIOn knowledge base
www.prio-n.com
3
vulnerability
bigprof online invoicing system 2.6
persistent xss
invoicing system
user-controlled input
dangerous javascript payloads
attacking user
A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /invoicing/app/invoices_view.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user to store dangerous JavaScript payloads on the system that will be triggered when the page loads.
| CPE | Name | Operator | Version |
|---|---|---|---|
| online_invoicing_system | eq | 2.6 |
Related
cve
cve
CVE-2023-6426
2023-11-30 14:15:20
nvd
nvd
CVE-2023-6426
2023-11-30 14:15:20
cvelist
cvelist
CVE-2023-6426 Cross-site Scripting vulnerability in BigProf products
2023-11-30 13:50:17
osv
osv
CVE-2023-6426
2023-11-30 14:15:20