Lucene search
+L

7 matches found

OSV
OSV
•added 2023/08/25 8:15 p.m.•16 views

CVE-2023-39707

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add Expense parameter under the Expense section...

5.4CVSS5.9AI score0.00705EPSS
SaveExploits1References3
NVD
NVD
•added 2023/08/25 8:15 p.m.•43 views

CVE-2023-39707

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add Expense parameter under the Expense section...

5.4CVSS5.3AI score0.00705EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2023/08/25 8:15 p.m.•6 views

CVE-2023-39707

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add Expense parameter under the Expense section...

5.4CVSS6.2AI score0.00705EPSS
SaveExploits1References4
Prion
Prion
•added 2023/08/25 8:15 p.m.•25 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add Expense parameter under the Expense section...

4.9CVSS5.3AI score0.00705EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/08/25 12:00 a.m.•44 views

CVE-2023-39707

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add Expense parameter under the Expense section...

5.5AI score0.00705EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/25 12:00 a.m.•1 views

CVE-2023-39707: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add Expense parameter under the Expense section...

5.4CVSS6.2AI score0.00705EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/02/03 12:00 a.m.•18 views

Daily Expense Tracker System Cross-Site Scripting Vulnerability (CNVD-2025-31005)

Daily Expense Tracker System is a PHP and MySQL based daily expense tracking system. Daily Expense Tracker System suffers from a cross-site scripting vulnerability that originates from the add-expense.php Item parameter. No details of the vulnerability are available at this time...

5.4CVSS6.2AI score0.00583EPSS
SaveExploits1References1
Rows per page
Query Builder