CVE-2022-40739

CVE-2022-40739 affects the Ragic report generation page, where insufficient filtering of special characters enables a reflected XSS attack. The vulnerability can be exploited by a remote attacker with general user privileges to inject JavaScript. CVSS v3.1 base score is 5.4 (Medium) with Network ...