CVE-2020-13639

CVE-2020-13639 describes a stored XSS in OutSystems’ ECT Provider that affects generated applications. An unauthenticated attacker could store malicious Feedback content in /ECT_Provider/, leading to attacker‑controlled JavaScript executing in the administrator’s browser when viewed by admins. Re...