medium6.1Public exploit code
CVE-2023-25439
Stored Cross Site Scripting (XSS) vulnerability in Square Pig FusionInvoice 2023-1.0, allows attackers to execute arbitrary code via the description or content…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- FusionInvoice 2023-1.0 - Stored XSS (Cross-Site Scripting)2023-05-23 · webapps · multiple
Impact
Stored Cross Site Scripting (XSS) vulnerability in Square Pig FusionInvoice 2023-1.0, allows attackers to execute arbitrary code via the description or content fields to the expenses, tasks, and customer details.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Squarepiginteractive | Fusioninvoice | Version 2023-1.0 |