CVE-2020-27406

DynPG 4.9.1 is affected by a Cross Site Scripting (XSS) vulnerability via the groupname field. The issue allows authenticated attackers to execute arbitrary code. Root cause is described as XSS, but the connected documents do not provide specific exploit paths, affected versions beyond 4.9.1, or ...