CVE-2017-1000466

Published January 3rd, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

3.5

LOW

Affected

PROJECT

Description

Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code.

invoiceninja/invoiceninja

A source-available invoice, quote, project and time-tracking app built with Laravel

GitHub

9.82K