A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /invoicing/app/items_view.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user to store dangerous JavaScript payloads on the system that will be triggered when the page loads.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: INCIBE
Published:
Updated: 2024-08-02T08:28:21.803Z
Reserved: 2023-11-30T10:45:59.186Z
Link: CVE-2023-6428

No data.

Status : Modified
Published: 2023-11-30T14:15:20.893
Modified: 2024-11-21T08:43:50.377
Link: CVE-2023-6428

No data.