SAS Stored Process Web Application Cross-Site Scripting Vulnerability

The SAS Stored Process Web Application is a stored procedure web application from SAS. A cross-site scripting vulnerability exists in SAS Stored Process Web Application versions 9.4M7 and 9.4M8, which stems from a reflected cross-site scripting XSS vulnerability in the program parameter of the...