CVE-2020-9338

CVE-2020-9338 affects SoPlanning 1.45, where an XSS flaw exists in the "+Your SoPlanning url+" field. Multiple connected sources confirm a cross-site scripting vulnerability in SoPlanning 1.45, enabling script execution when the vulnerable URL field is manipulated. The Attackerkb entry notes this...