Skip to content
OpenAdvisories

Package · Hackage

hledger-web

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Unscored —
    CVE-2021-46888

    Stored XSS in hledger-web

    An issue was discovered in hledger before 1.23. A Stored Cross-Site Scripting (XSS) vulnerability exists in toBloodhoundJson that allows an attacker to execute JavaScript by encoding user-controlled values in a payload with base64 and parsing them with the at…

    hledger-web Hackage