Leantime allows Stored Cross-Site Scripting (XSS)

Description

References

• Leantime/leantime security advisory · WEB
• Leantime/leantime commit d8b1099 · WEB
• Leantime/leantime · PACKAGE

Weitere Schwachstellen in leantime/leantime

• CVE-2026-85990HOCH 8.8Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation and plugin-management …
• GHSA-qrfh-cc86-vc8cMITTEL 5.4Leantime has HTML injection through firstname and lastname fields
• CVE-2025-28254MITTEL 5.4Cross Site Scripting vulnerability in Leantime v3.2.1 and before allows an authenticated attacker to execute arbitrary code and obtain sensi…
• GHSA-f679-254h-qhvjNIEDRIGLeantime allows Cross-Site Scripting (XSS)
• GHSA-3hfj-qcvj-4hx8NIEDRIGLeantime has Missing Authorization Check for Host Parameter