Lucene search
Veracode Vulnerability DatabaseVERACODE:39341HistoryFeb 18, 2023 - 8:05 p.m.
Cross-site Scripting (XSS)
2023-02-1820:05:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
kimai
xss
cross-site scripting
markdownextension.php
security
javascript
browser
privileges
EPSS
0.002
Percentile
60.8%
kimai/kimai is vulnerable to Cross-site Scripting (XSS) attacks. The library does not properly escape the user input of MarkdownExtension.php, which allows an attacker to inject and execute malicious JavaScript on a victim’s browser which can result in an attacker gaining escalated privileges.
Related
osv
osv
Cross-site Scripting in kimai/kimai
2023-02-16 00:30:28
CVE-2020-19825
2023-02-15 22:15:10
cve
cve
CVE-2020-19825
2023-02-15 22:15:10
github
github
Cross-site Scripting in kimai/kimai
2023-02-16 00:30:28
nvd
nvd
CVE-2020-19825
2023-02-15 22:15:10
prion
prion
Cross site scripting
2023-02-15 22:15:00
cvelist
cvelist
CVE-2020-19825
2023-02-15 00:00:00