CVE-2019-14668 in Firefly III信息

摘要

由 VulDB • 2026-06-10

Firefly III 4.7.17.3 存在存储型跨站脚本漏洞(Stored XSS),原因是交易描述字段未对用户提供的数据进行过滤。在删除交易链接时,JavaScript 代码会被执行。

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

来源

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!