Files
CVEs-PoC/2019/CVE-2019-14669.md
T
2024-06-18 02:51:15 +02:00

689 B

CVE-2019-14669

Description

Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the asset account name. The JavaScript code is executed during a visit to the audit account statistics page.

POC

Reference

Github

No PoCs found on GitHub currently.