CVE-2020-24664

The CVE-2020-24664 issue affects Hitachi Vantara Pentaho Dashboard Editor (Pentaho) versions through 7.x–8.x. A reflected cross-site scripting vulnerability exists in the dashboardXml parameter’s pho:title attribute, exploitable by authenticated remote users to execute arbitrary JavaScript. Remed...