{ "id": "CVE-2023-25439", "sourceIdentifier": "cve@mitre.org", "published": "2023-05-25T20:15:09.280", "lastModified": "2023-05-26T12:44:04.697", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "Stored Cross Site Scripting (XSS) vulnerability in Square Pig FusionInvoice 2023-1.0, allows attackers to execute arbitrary code via the description or content fields to the expenses, tasks, and customer details." } ], "metrics": {}, "references": [ { "url": "https://packetstormsecurity.com/files/172556/FusionInvoice-2023-1.0-Cross-Site-Scripting.html", "source": "cve@mitre.org" } ] }