medium6.1
CVE-2023-23011
Cross Site Scripting (XSS) vulnerability in InvoicePlane 1.6 via filter_product input to file modal_product_lookups.php.
Impact
Cross Site Scripting (XSS) vulnerability in InvoicePlane 1.6 via filter_product input to file modal_product_lookups.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Invoiceplane | Invoiceplane | Version 1.6.0 |