| Package | Affected versions | Patched versions |
|---|---|---|
| leantime | = 3.0.6 |
In Leantime 3.0.6, a Cross-Site Scripting vulnerability exists within the ticket creation and modification functionality, allowing attackers to inject malicious JavaScript code into the title field of tickets (also known as to-dos). This stored XSS vulnerability can be exploited to perform Server-Side Request Forgery (SSRF) attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free