CVE-2021-3985

kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3985

kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3985 Cross-site Scripting (XSS) - Stored in kevinpapst/kimai2

kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3985

CVE-2021-3985 affects kimai2, an open-source web-based time-tracking app. The vulnerability is a Cross-site Scripting (XSS) caused by improper neutralization of input during web page generation, leading to high-severity impact on confidentiality, integrity, and availability. The CVSS data indicat...