Skip to content
OpenAdvisories
Medium · 6.1 CVE-2023-23011 EUVD-2023-27111GHSA-f79p-fhg6-6wgx

Cross Site Scripting (XSS) vulnerability in InvoicePlane 1.6 via filter_product input to file modal_product_lookups.php.

Published Feb 7, 2023 · Updated Mar 25, 2025 · Assigned by mitre