Description
Firefly III (aka firefly-iii) before 6.1.1 allows webhooks HTML Injection.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | grumpydictator/firefly-iii | < 6.1.1 | 6.1.1 | GHSA-vwv2-9wcj-64vx |
Medium · 6.1
CVE-2024-22075
EUVD-2024-0442GHSA-vwv2-9wcj-64vx
Firefly III allows webhooks HTML Injection.
Published Jan 5, 2024 · Updated Jun 5, 2025 · Assigned by mitre