CVE:CVE-2023-1688
CNNVD:CNNVD-202303-2473
Expense Tracker是SourceCode and Projects组织的一个开支追踪器。
SourceCodester Earnings and Expense Tracker App 1.0版本存在安全漏洞，该漏洞源于对参数name的错误操作导致跨站脚本。
solution:Upgrade earnings_and_expense_tracker_application_project earnings_and_expense_tracker_application to a higher version than 1.0,and avoid the version 1.0