CVE-2017-1000239

InvoicePlane version 1.4.10 is vulnerable to a Stored Cross Site Scripting resulting in allowing an authenticated user to inject malicious client side script…

published November 17, 2017

CVSS
—
EPSS
0%
Percentile
39.8
In the wild
Unconfirmed
What it is

InvoicePlane version 1.4.10 is vulnerable to a Stored Cross Site Scripting resulting in allowing an authenticated user to inject malicious client side script which will be executed in the browser of users if they visit the manipulated site.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00476 · 39.8th percentile
Published
2017-11-17T03:00Z
EPSS history
Timeline
  • 17 NOV 03:00Z
    InvoicePlane version 1.4.10 is vulnerable to a Stored Cross Site Scripting resulting in allowing an authenticated user to inject malicious client side script…
    cvelistv5