PT-2022-16894

Name of the Vulnerable Software and Affected Versions Directus versions prior to 9.7.0 Description The issue allows unauthorized JavaScript to be executed by inserting an iframe into the rich text html interface that links to a file uploaded HTML file, which loads another uploaded JS file in its...