CVE-2023-23011

Cross Site Scripting XSS vulnerability in InvoicePlane 1.6 via filterproduct input to file modalproductlookups.php...

CVE-2023-23011

CVE-2023-23011 affects InvoicePlane 1.6. The vulnerability is a Cross Site Scripting (XSS) flaw triggered through the filter_product input in modal_product_lookups.php. The root cause, as reported in the sources, is unsanitized input that can be reflected in the browser, enabling script execution...