Vulnerability Details CVE-2023-25439
Stored Cross Site Scripting (XSS) vulnerability in Square Pig FusionInvoice 2023-1.0, allows attackers to execute arbitrary code via the description or content fields to the expenses, tasks, and customer details.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.3%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2023-25439
-
cpe:2.3:a:squarepiginteractive:fusioninvoice:2023-1.0