CVE-2019-14667

Firefly III 4.7.17.4 is vulnerable to multiple stored XSS issues due to the lack of filtration of user-supplied data in the transaction description fi...

Original description

The description as published by the source.

Firefly III 4.7.17.4 is vulnerable to multiple stored XSS issues due to the lack of filtration of user-supplied data in the transaction description field and the asset account name. The JavaScript code is executed during a convert transaction action.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch github.com
patch github.com
report github.com