Security Advisory
CVE-2019-13646
5.4
MEDIUM
Vulnerability Description
Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query. NOTE: It is asserted that an attacker must have the same access rights as the user in order to be able to execute the vulnerability
Published Date
July 18, 2019
Official Source
NIST NVD Advisory