CVE-2018-12353

Knowage (formerly SpagoBI) 6.1.1 is affected by a Cross-Site Scripting (XSS) vulnerability in the name field of the Business Model’s Catalogue, leading to script injection in the catalogue view. The issue is documented as CVE-2018-12353 with public references indicating XSS via the name field and...