CVE-2022-26246: Improper Neutralization of Input During Web Page Generation

TMS v2.28.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /TMS/admin/setting/mail/createorupdate...