Executive brief
Firefly II has Stored XSS in Audit Log Entry view via piggy bank name (ale.twig)
Affected products
- Packagist grumpydictator/firefly-iii
Junglewise Threat Intelligence
Firefly II has Stored XSS in Audit Log Entry view via piggy bank name (ale.twig)
Severity: medium · CVSS 4 · Published 2026-06-12
Technologies: grumpydictator/firefly-iii (Packagist). Vendors: Packagist.