GHSA-7v44-75jf-22gj
Kimai v2 is vulnerable to Cross-Site Scripting (XSS)
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | kevinpapst/kimai2 | < 1.1 | 1.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
Kimai v2 before 1.1 has XSS via a timesheet description.
References
External links from the advisory. They lead to third-party sites.