Description
A cross-site scripting (XSS) vulnerability in Expense Tracker 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat text field.
Medium · 5.4
CVE-2022-45033
EUVD-2022-47958GHSA-w9wh-9wcx-f2x4
A cross-site scripting (XSS) vulnerability in Expense Tracker 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted p…
Published Dec 15, 2022 · Updated Apr 21, 2025 · Assigned by mitre