9.6
CVSSv3

CVE-2020-19825

Published: 15/02/2023 Updated: 23/02/2023
CVSS v3 Base Score: 9.6 | Impact Score: 6 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

Cross Site Scripting (XSS) vulnerability in kevinpapst kimai2 1.30.0 in /src/Twig/Runtime/MarkdownExtension.php, allows malicious users to gain escalated privileges.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

kimai kimai 1.30.0