OpenXE code injection vulnerability

OpenXE is a free open source ERP based on Xentral by OpenXE Open Source. A code injection vulnerability exists in OpenXE 1.12 and earlier versions, which stems from the fact that incorrect manipulation of the parameter Notizen can lead to cross-site scripting...