CVE-2019-14667

Firefly III 4.7.17.4 is vulnerable to multiple stored XSS issues due to the lack of filtration of user-supplied data in the transaction description fi...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Firefly III 4.7.17.4 is vulnerable to multiple stored XSS issues due to the lack of filtration of user-supplied data in the transaction description field and the asset account name. The JavaScript code is executed during a convert transaction action.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

patch github.com
patch github.com
report github.com