Cross site scripting

A vulnerability classified as problematic was found in Zenoss Dashboard up to 1.3.4. Affected by this vulnerability is an unknown functionality of the file ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js. The manipulation of the argument HTMLString leads to cross site scripting...

CVE-2018-25063

The CVE-2018-25063 issue affects Zenoss Dashboard up to version 1.3.4, caused by an XSS vulnerability in ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js where manipulating the HTMLString argument enables cross-site scripting. The vulnerability can be triggered remotely. Remediat...