medium5.4
CVE-2019-13646
Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query.
Impact
Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query. NOTE: It is asserted that an attacker must have the same access rights as the user in order to be able to execute the vulnerability
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Firefly-Iii | Firefly Iii | before 4.7.17.3 |