CVE-2021-28290

The CVE-2021-28290 entry applies to Skoruba IdentityServer4.Admin prior to 2.0.0, where an XSS flaw occurs because an unencoded value is passed to the data-secret-value parameter. The vulnerability affects that admin interface and can enable cross-site scripting via the affected input path. The N...