Description
Kimai v2 before 1.1 has XSS via a timesheet description.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | kevinpapst/kimai2 | < 1.1 | 1.1 | GHSA-7v44-75jf-22gj |
Medium · 6.1
CVE-2019-15481
EUVD-2022-3061GHSA-7v44-75jf-22gj
Kimai v2 is vulnerable to Cross-Site Scripting (XSS)
Published Aug 23, 2019 · Updated Aug 5, 2024 · Assigned by mitre