WS-2022-0288

In corebos, the value for the stuffid parameter is reflected in the web context without proper filtering in place resulting in possibility to execute malicious javascript code...