CVE-2021-3977
1 advisory.
Packagist/hillelcoren/invoice-ninja CVE-2021-3977: medium 5.4
invoiceninja is vulnerable to Cross-site Scripting
Action: Upgrade hillelcoren/invoice-ninja to 5.3.35 or later.
composer require hillelcoren/invoice-ninja:5.3.35Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.3.35 | - |
Fixed versions
| 5.3.35 |
Sources
- osv: GHSA-xg6r-5gx4-qxjm
- https://nvd.nist.gov/vuln/detail/CVE-2021-3977
- https://github.com/invoiceninja/invoiceninja/commit/1186eaa82375692d01d5ef3369c5b7bc7315b55f
- https://github.com/invoiceninja/invoiceninja
- https://github.com/invoiceninja/invoiceninja/releases/tag/v5.3.35
- https://huntr.dev/bounties/99c4ed09-b66f-474a-bd74-eeccf9339fde
CVE-2021-3977 · published · modified · JSON