CVE-2023-25439

CVE-2023-25439 describes a stored XSS in FusionInvoice 2023-1.0 from Square Pig. The vulnerability affects the description and content fields in expenses, tasks, and customer details, allowing attackers to inject scripts that execute in the web context. Public sources consistently identify the af...