Munkireport Cross-Site Scripting Vulnerability

Munkireport is a reporting client for munki. A cross-site scripting vulnerability exists in Munkireport versions prior to 5.3.0. An attacker can exploit this vulnerability to inject javascript into the MunkiReport database via the /report/brokenclient endpoint...