PT-2021-18591

Name of the Vulnerable Software and Affected Versions Knowage Suite versions prior to 7.4 Description The issue allows an attacker to inject arbitrary external scripts via the SBI HOST parameter in the "/knowagecockpitengine/api/1.0/pages/execute" API endpoint, leading to cross-site scripting XSS...