← All advisories

Medium severity6.1OSV Advisory· Published Jul 3, 2018· Updated Jun 17, 2026

CVE-2018-12255

CVE-2018-12255

Description

An XSS issue was discovered in InvoicePlane 1.5.10 via the "Quote PDF Password(Optional)" field.

Affected products

3

Invoiceplane/InvoiceplaneOSV3 versions
0.9beta, v1.0.0, v1.0.1, …+ 2 more
- (no CPE)range: 0.9beta, v1.0.0, v1.0.1, …
- cpe:2.3:a:invoiceplane:invoiceplane:1.5.10:*:*:*:*:*:*:*
- (no CPE)range: =1.5.10

Patches

Vulnerability mechanics

References

1

development.invoiceplane.com/browse/IP-707nvdBroken Link

News mentions

0

No linked articles in our index yet.