kevinpapst

7 results · Clear filters · Feed

• Medium 6.4
  CVE-2019-25317

  Kimai 2- persistent cross-site scripting (XSS)

  Kimai 2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into timesheet descriptions. Attackers can insert SVG-based XSS payloads in the description field to execute arbitrary JavaScript when the page …

  kevinpapst Kimai kimai/kimai Packagist
  Feb 11, 2026
• Medium 6.5
  CVE-2021-4033

  Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2

  kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

  kevinpapst kevinpapst/kimai2 kevinpapst/kimai2 Packagist
  Dec 9, 2021
• Medium 6.3
  CVE-2021-3983

  Cross-site Scripting (XSS) - Stored in kevinpapst/kimai2

  kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  kevinpapst kevinpapst/kimai2 kevinpapst/kimai2 Packagist
  Dec 1, 2021
• Medium 6.5
  CVE-2021-3992

  Improper Access Control in kevinpapst/kimai2

  kimai2 is vulnerable to Improper Access Control

  kevinpapst kevinpapst/kimai2 kevinpapst/kimai2 Packagist
  Dec 1, 2021
• Medium 4.6
  CVE-2021-3957

  Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2

  kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

  kevinpapst kevinpapst/kimai2 kevinpapst/kimai2 Packagist
  Nov 19, 2021
• Medium 4.3
  CVE-2021-3963

  Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2

  kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

  kevinpapst kevinpapst/kimai2 kevinpapst/kimai2 Packagist
  Nov 19, 2021
• Medium 4.3
  CVE-2021-3976

  Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2

  kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

  kevinpapst kevinpapst/kimai2 kevinpapst/kimai2 Packagist
  Nov 19, 2021