CVE-2020-23050

TAO Open Source Assessment Platform v3.3.0 RC02 contains a HTML injection vulnerability in the userFirstName field of the user account input. The issue enables phishing, external redirects, and arbitrary code execution. Root cause is HTML injection in the userFirstName parameter. Related advisori...