CVE-2024-31401

A cross-site scripting (XSS) vulnerability exists in Cybozu Garoon versions 5.0.0 through 5.15.2 . The root cause is the application's lack of effective filtering and escaping of user-supplied data. A remote authenticated attacker with administrative privileges can exploit this to inject an arbit...