Home
MEDIUM: 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:LDefault status
unaffected
Any version before 1.10.0
affected
Description
An authenticated user could submit scripting to fields that lack proper input and output sanitization leading to subsequent client-side script execution.
Problem types
CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
Product status
Any version before 1.10.0
References
selinc.com/products/software/latest-software-versions/