Cross site scripting

Eramba e1.0.6.033 has Stored XSS on the tooltip box via the /programScopes description parameter...