Description

XSS vulnerability in integration URL that could execute javascript when clicking on the URL

Proof of Concept

1. navigate to the panel dashboard
2. add or edit integration and insert the URL of integration with this payload

javascript:alert(1)

POC:

https://drive.google.com/file/d/1jK0eBsnhCEhhuun8Xu7uKb1tCjuKnPEi/view?usp=sharing

https://drive.google.com/file/d/1c80JrArTMKGeKUW13Ny34OgZht8HSAnR/view?usp=sharing