Описание
SolidInvoice version 2.3.7 is vulnerable to a Stored Cross-Site Scripting (XSS) issue in the Tax Rates functionality. The vulnerability is fixed in version 2.3.8.
Ссылки
- ExploitThird Party Advisory
- Product
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:solidinvoice:solidinvoice:2.3.7:*:*:*:*:*:*:*
EPSS
Процентиль: 7%
0.00026
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 6.1
github
5 месяцев назад
SolidInvoice 2.3.7 and fixed in v.2.3.8 is vulnerable to Cross Site Scripting (XSS) in the Tax Rate functionality.
EPSS
Процентиль: 7%
0.00026
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-79