CVE-2019-14297

Veeam ONE Reporter 9.5.0.3201 allows XSS via the Add/Edit Widget with a crafted Caption field to setDashboardWidget in CommonDataHandlerReadOnly.ashx...

CVE-2019-14297

Veeam ONE Reporter 9.5.0.3201 is affected by a cross-site scripting vulnerability. The issue arises in the Add/Edit Widget functionality where a crafted value in the Caption field can impact setDashboardWidget in CommonDataHandlerReadOnly.ashx, indicating insufficient input validation/encoding in...