PT-2020-11965

Name of the Vulnerable Software and Affected Versions Munkireport versions prior to 5.3.0.3923 Description An issue was discovered that allows an unauthenticated actor to send a custom XSS payload through the "/report/broken client" endpoint. The payload will be executed by any authenticated user...