5 matches found
CVE-2021-3977
invoiceninja is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
6.5CVSS6.7AI score0.00592EPSS
SaveExploits1References1
CVE-2021-3977
invoiceninja is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
5.4CVSS6.7AI score
SaveExploits0References2
CVE-2021-3977
invoiceninja is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
6.5CVSS6.4AI score0.00592EPSS
SaveExploits1References3
CVE-2021-3977
CVE-2021-3977 affects invoiceninja. The connected sources describe a Cross-site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation, enabling attacker-supplied scripts to execute in a victim’s browser. The issue is documented across multiple feeds (...
6.5CVSS5.5AI score0.00592EPSS
SaveExploits1References2Affected Software1
20