CVE-2020-9390

SquaredUp versions prior to 4.6.0 are affected by a Stored XSS vulnerability that lets a user create a dashboard that executes malicious content in an iframe or by uploading an SVG containing a script. The issue is publicly documented with remediation guidance: upgrade to version 4.6.0 or later; ...