CVE-2020-14462

CALDERA 2.7.0 allows XSS via the Operation Name box...

CVE-2020-14462

CVE-2020-14462 concerns CALDERA 2.7.0 with a cross-site scripting (XSS) vulnerability in the WEB application, arising from lack of proper validation of client-side data in the Operation Name box. Multiple connected sources (CNVD-2021-22479, RH: Red Hat, NVD, OSV, CNVD) describe it as a Caldera XS...