~ / search / GHSA-mrc2-h7q2-pp97

GHSA-mrc2-h7q2-pp97

Firefly III vulnerable to reflected cross-site scripting

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-13646

Packages

EcosystemPackageAffectedFixed in
Packagist grumpydictator/firefly-iii < 4.7.17.3 4.7.17.3

Details

As written in the advisory (Markdown source, shown as plain text).

Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query.

References

External links from the advisory. They lead to third-party sites.