CVE-2023-23011

MEDIUM CVSS: 6.1 Published: 2023-02-07 Modified: 2026-06-17

Description

Cross Site Scripting (XSS) vulnerability in InvoicePlane 1.6 via filter_product input to file modal_product_lookups.php.

Affected Platforms

Invoiceplane Invoiceplane

Weakness Type

CWE-79, CWE-79

References