CVE-2023-33961 — Leantime Stored Cross-site Scripting Vulnerability
Leantime is a lean open source project management system. Starting in version 2.3.21, an authenticated user with commenting privileges can inject malicious Javascript into a com…
Published: 2023-05-30 · CVSS: 8.9 · CVSS 3.1
Leantime is a lean open source project management system. Starting in version 2.3.21, an authenticated user with commenting privileges can inject malicious Javascript into a comment. Once the malicious comment is loaded in the browser by a user, the malicious Javascript code executes. As of time of publication, a patch does not exist.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7