Lucene search
PRIOn knowledge basePRION:CVE-2023-6429HistoryNov 30, 2023 - 2:15 p.m.
Design/Logic Flaw
2023-11-3014:15:00
PRIOn knowledge base
www.prio-n.com
2
vulnerability
bigprof online invoicing
persistent xss
user input
exploitation
A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /invoicing/app/clients_view.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user to store dangerous JavaScript payloads on the system that will be triggered when the page loads.
| CPE | Name | Operator | Version |
|---|---|---|---|
| online_invoicing_system | eq | 2.6 |
Related
osv
osv
CVE-2023-6429
2023-11-30 14:15:21
cve
cve
CVE-2023-6429
2023-11-30 14:15:21
cvelist
cvelist
CVE-2023-6429 Cross-site Scripting vulnerability in BigProf products
2023-11-30 13:54:03
nvd
nvd
CVE-2023-6429
2023-11-30 14:15:21