cve/2019/CVE-2019-13646.md
2024-06-18 02:51:15 +02:00

750 B

CVE-2019-13646

Description

** DISPUTED ** Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query. NOTE: It is asserted that an attacker must have the same access rights as the user in order to be able to execute the vulnerability.

POC

Reference

Github

No PoCs found on GitHub currently.