CVE-2019-14669 in Firefly III信息

摘要

由 VulDB • 2026-06-10

Firefly III 4.7.17.3 存在存储型跨站脚本(Stored XSS)漏洞,原因是资产账户名称中缺乏对用户输入数据的过滤。在访问审计账户统计页面时,JavaScript 代码将被执行。

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

来源

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!