Lucene search
Veracode Vulnerability DatabaseVERACODE:21182HistoryAug 13, 2019 - 3:02 a.m.
Cross-site Scripting (XSS)
2019-08-1303:02:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
21.6%
grumpydictator/firefly-iii is vulnerable to cross-site scripting (XSS). The vulnerability exists through the lack of sanitization of link.destination.description and link.source.description in delete.twig.
| CPE | Name | Operator | Version |
|---|---|---|---|
| grumpydictator/firefly-iii | le | 4.7.17.3 |
Related
prion
prion
Design/Logic Flaw
2019-08-05 20:15:00
osv
osv
CVE-2019-14668
2019-08-05 20:15:11
nvd
nvd
CVE-2019-14668
2019-08-05 20:15:11
cve
cve
CVE-2019-14668
2019-08-05 20:15:11
cvelist
cvelist
CVE-2019-14668
2019-08-05 19:23:34