| शीर्षक | Eigenfocus Eigenfocus Free Edition 1.4.0 Cross Site Scripting |
|---|
| विवरण | Eigenfocus Free Edition ≤ 1.4.0 contains a stored Cross-Site Scripting (XSS) vulnerability in Issue Title and Time Entry Description fields. User-supplied input is not properly sanitized, allowing attackers to store malicious payloads that execute in the browser of any user who views the affected entries. This can lead to arbitrary JavaScript execution, session hijacking, account compromise, and other unauthorized actions. The issue is resolved in version 1.4.1.
Release 1.4.1 link: https://github.com/Eigenfocus/eigenfocus/releases/tag/v1.4.1-free
Fix commit link: https://github.com/Eigenfocus/eigenfocus/commit/7dec94c9d1f3e513e0ee38ba68caaba628e08582
Discovered by Alex Perrakis - [email protected] |
|---|
| स्रोत | ⚠️ https://github.com/Stolichnayer/eigenfocus-stored-xss |
|---|
| उपयोगकर्ता | alexperrakis (UID 85369) |
|---|
| सबमिशन | 21/11/2025 08:13 PM (10 महीनों पहले) |
|---|
| संयम | 23/11/2025 10:53 AM (2 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 333348 [Eigenfocus तक 1.4.0 Description entry.description/time_entry.description क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|