VULNERABILITY INTELLIGENCE

CVE-2023-25439

CVSS score6.1 MEDIUM

EPSS probability2.25%

CISA KEVNot currently listed

Published2023-05-25

Last modified2026-06-17

Description

Stored Cross Site Scripting (XSS) vulnerability in Square Pig FusionInvoice 2023-1.0, allows attackers to execute arbitrary code via the description or content fields to the expenses, tasks, and customer details.