CVE-2021-30058

Knowage Suite before 7.4 is vulnerable to cross-site scripting XSS. An attacker can inject arbitrary external script in '/knowagecockpitengine/api/1.0/pages/execute' via the 'SBIHOST' parameter...

PT-2021-18591

Name of the Vulnerable Software and Affected Versions Knowage Suite versions prior to 7.4 Description The issue allows an attacker to inject arbitrary external scripts via the SBI HOST parameter in the "/knowagecockpitengine/api/1.0/pages/execute" API endpoint, leading to cross-site scripting XSS...