CVE-2018-12255: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in InvoicePlane 1.5.10 via the "Quote PDF PasswordOptional" field...

PT-2018-11079

Name of the Vulnerable Software and Affected Versions InvoicePlane version 1.5.10 Description A cross-site scripting XSS issue was found in the software. The issue is related to the "Quote PDF PasswordOptional" field, which is vulnerable to XSS attacks. Recommendations For InvoicePlane version...