CVE-2024-35224: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

OpenProject is the leading open source project management software. OpenProject utilizes tablesorter inside of the Cost Report feature. This dependency, when misconfigured, can lead to Stored XSS via icon substitution in table header values. This attack requires the permissions "Edit work package...