← Database

CVE-2023-25439

MEDIUM CVSS: 6.1 Published: 2023-05-25 Modified: 2026-06-17

Description

Stored Cross Site Scripting (XSS) vulnerability in Square Pig FusionInvoice 2023-1.0, allows attackers to execute arbitrary code via the description or content fields to the expenses, tasks, and customer details.

Affected Platforms

Squarepiginteractive Fusioninvoice

Weakness Type

CWE-79, CWE-79

References