Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the selectedItem.groupdescriptivenam attribute. An attacker can execute arbitrary JavaScript in the context of other users by injecting malicious scripts through the organization site names, which are stored...