EUVD-2022-3061

Malicious code in bioql PyPI...

Kimai v2 is vulnerable to Cross-Site Scripting (XSS)

Kimai v2 before 1.1 has XSS via a timesheet description...

GHSA-7V44-75JF-22GJ Kimai v2 is vulnerable to Cross-Site Scripting (XSS)

Kimai v2 before 1.1 has XSS via a timesheet description...

CVE-2019-15481

Kimai v2 before 1.1 has XSS via a timesheet description...

CVE-2019-15481

Kimai v2 before 1.1 has XSS via a timesheet description...

Information disclosure

Kimai v2 before 1.1 has XSS via a timesheet description...

CVE-2019-15481

Kimai v2 before 1.1 has XSS via a timesheet description...

CVE-2019-15481

Affected product: Kimai v2 prior to 1.1. The vulnerability is an XSS flaw in the timesheet description field, where unescaped user input can be rendered in the UI. Root cause: lack of proper escaping/validation of the timesheet description leading to script injection. Impact: cross-site scripting...

PT-2019-14210

Name of the Vulnerable Software and Affected Versions Kimai v2 version 1.0 Description The issue allows for XSS via a timesheet description. Recommendations For Kimai v2 version 1.0, update to version 1.1 or later to resolve the issue...