PT-2022-8653

Name of the Vulnerable Software and Affected Versions MicroStrategy Web SDK versions 10.11 and earlier Description The issue allows remote unauthenticated attackers to execute arbitrary code via the key parameter to the getESRIExtraConfig task. This is a Cross-Site Scripting XSS issue...