PT-2019-13770

Name of the Vulnerable Software and Affected Versions Firefly III version 4.7.17.3 Description The issue arises from the lack of filtration of user-supplied data in the transaction description field, leading to stored XSS. This allows JavaScript code to be executed during the deletion of a...