Executive brief
Leantime has HTML injection through firstname and lastname fields
Affected products
- Packagist leantime/leantime
Junglewise Threat Intelligence
Leantime has HTML injection through firstname and lastname fields
Severity: low · CVSS 3.1 · Published 2026-03-05
Technologies: leantime/leantime (Packagist). Vendors: Packagist.